Their domain
Served from the client's own domain
Point a subdomain at us and the page is issued its own certificate automatically. Visitors see the client's domain and your branding, and nothing else.
Loading…
Trust pages
Published from the facts you already confirmed, so the page and the DPA cannot say different things. What you have not confirmed does not appear on it.
Doing this for clients rather than your own company? The same page for a practice.
Free · No sign-up · Up to ten websites
A trust page is the public page a prospective customer is sent to before they ask for a questionnaire: who your sub-processors are, where data goes, how long you keep it, what you are certified for.
The danger with one is drift. A page written once and edited by hand slowly stops matching the agreements you sign, and the first person to notice is usually a customer's lawyer.
What it has to cover
Their domain
Point a subdomain at us and the page is issued its own certificate automatically. Visitors see the client's domain and your branding, and nothing else.
Same facts
The page reads the same confirmed facts and the same vendor records as the client's pack, so the published list and the contractual annex agree by construction.
Requests to you
A request for a document reaches your workspace with who asked and for what, so you decide what is shared rather than finding out later.
Every vendor fact comes from our own registry: 225 vendors with the date each entry was checked.
Add the client's subdomain, they add one DNS record, and the certificate is issued and renewed without anyone handling a key.
Your firm's logo and colours. No logo, link or mention of us anywhere on the page.
Published straight from the verified records, with the date each vendor was last checked.
Each section is published only when you turn it on. Nothing goes public because it exists in the workspace.
A visitor asks for a document, you approve or decline, and the decision is recorded.
A change to a published vendor marks the page so you can republish before a prospect reads something untrue.
Turn on the sections the client is comfortable making public, from the facts they already confirmed.
The client adds one DNS record for a subdomain of their own. The certificate is issued automatically.
Publish under your brand, handle document requests from the workspace, and republish when a vendor change touches the page.
Enter up to ten client websites. Free, no sign-up, the first report in about a minute.