Trust Center

A public-facing security portal that shows customers and prospects your compliance posture.

Overview

The Trust Center is a hosted public page where security teams, procurement officers, and prospects can review your security posture without sending you a questionnaire. You share a link — they self-serve.

It displays your active certifications, compliance frameworks, published policies, uptime status, and data residency information. For sensitive documents you can require visitors to sign an NDA before gaining access.

Send your Trust Center link early in enterprise sales cycles to pre-empt security review delays. Many vendor assessments can be closed without a back-and-forth questionnaire.

What your Trust Center shows

Certifications

ISO 27001, SOC 2, and other certificates you have uploaded to Matproof, with expiry dates.

Compliance frameworks

Frameworks you are actively working toward or have completed, such as GDPR, NIS2, or DORA.

Security policies

Published policies from your policy library — only ones you explicitly make visible appear here.

Uptime and reliability

Current and historical uptime, pulled from your linked status page.

Data residency

Where your customer data is stored and processed.

NDA-gated documents

Sensitive documents that require a signed NDA before the visitor can download them.

Setting up your portal

1. Go to Trust Center → Portal Settings (/[orgId]/trust/portal-settings)
2. Upload your company logo
3. Set the public display name
4. Add a short description of your security program
5. Configure data residency and uptime settings
6. Save — your portal is live at your unique Trust Center URL

The Trust Center URL is public but unlisted. Anyone with the link can view it. If you want to restrict access, use the NDA gate described below.

Publishing documents

You control exactly which policies and documents appear on your portal.

1. Go to Trust Center → Documents
2. Toggle visibility on any policy from your policy library
3. To add a non-policy document (e.g., a penetration test summary), upload it directly
4. Set the access level: Public (visible immediately) or NDA-gated (requires signature)

Published documents appear in the Security Policies section of your portal within seconds.

Only publish documents you are comfortable sharing externally. NDA-gating adds a signature step but does not prevent a signed visitor from sharing the content.

NDA gate

When NDA gating is enabled, visitors must enter their name and email and accept your NDA terms before accessing gated documents.

To enable:

1. Go to Portal Settings → NDA
2. Toggle Require NDA for sensitive documents
3. Upload your NDA template or use Matproof’s default
4. Save

Each accepted NDA is logged with the visitor’s name, email, and timestamp. You can export this log from Portal Settings → NDA Signatories.

NDA gating is available as a feature flag (is-trust-nda-enabled). Contact support to enable it for your organization.

Sharing with customers

Once your portal is live, copy the link from the Trust Center dashboard and share it:

• In email during security review conversations
• In your sales deck or security one-pager
• In your product’s documentation or website footer
• As a response to vendor questionnaires that ask for a security page

Prospects can bookmark the URL — the page always reflects your current posture as you update certifications and policies.

Using the Trust Center in enterprise sales

A Trust Center link reduces friction in three common scenarios:

Vendor assessment questionnaires — Instead of filling out every question from scratch, share the link and note which sections are answered by your published policies and certificates.

Procurement reviews — Buyers doing due diligence can check your security posture asynchronously, without scheduling a call with your team.

Renewal reviews — Existing customers can verify your continued compliance without asking for updated documents every year.

Pair the Trust Center with Matproof’s AI Questionnaire module. Use the Trust Center for initial visibility and the AI Questionnaire to handle formal vendor assessment forms. See AI Questionnaire.