Free to publish
Answer it once, on a page they can read.
A Trust Center is a public page carrying the security questions you are asked most often, already answered. Buyers read it instead of sending you a questionnaire, and the ones who still send it start from a much shorter list.
11 questions · about twenty minutes · nothing to pay
What a published page does for you
A page instead of a reply
Somebody asks how you handle encryption, data residency or sub-processors. You send one address rather than writing the same paragraph again, and a buyer who reads it may never send the spreadsheet at all.
Answers you wrote, in your own words
You type each answer and decide which ones are public, which is why publishing costs nothing and why every sentence on it is defensible. A plan can draft them from your documents instead, and even then nothing appears on the page until you have read it and published it.
Readable by the tools that assess you
A vendor review now opens with a crawler or a procurement agent rather than a person. The page is server-rendered, so what they read is what you published, not an empty shell waiting for JavaScript.
It stays useful when you subscribe
Published answers live in your answer library, so the first questionnaire you do run reuses them instead of asking you the same things again.
The form
These are the questions
The same 11 we answer about ourselves on our own Trust Center, on the page component yours is rendered with. Answer any of them, publish the ones you want public, and leave the rest. Three published answers is the point at which a page is worth sending to somebody.
- Is customer data encrypted in transit and at rest?
- How is one customer's data kept separate from another's?
- Where is customer data stored?
- Do you train models on customer data?
- Do you maintain a current SOC 2 Type II report?
- Do you delete customer data on request?
- Do you maintain a sub-processor list, and will you sign a DPA?
- Is multi-factor authentication available?
- Can you show who changed an answer, and when?
- How do you handle reported vulnerabilities?
- What is your incident notification commitment?
Being clear about it
What this is not
Free means you write them. Publishing a page costs nothing because the answers are yours, typed. Reading your policies, drafting from them and citing the passage each answer came from is the product: it costs us real money every time it runs, and it starts at $19 a month. A plan will draft these eleven for you too.
It is not a trial that expires. A published page stays published and stays yours. If you never subscribe, nothing is taken away. We think you will, the first time a two hundred row workbook lands, and that is the whole argument.