FAQ
Getting started
Section titled “Getting started”Do I need SOC 2 or ISO 27001 before I start?
Section titled “Do I need SOC 2 or ISO 27001 before I start?”No. Publish the controls and documents you have today, and add certifications when they’re complete. You can list frameworks as In progress in the meantime. See Compliance.
Do I need a password?
Section titled “Do I need a password?”No. You sign in with a link that Notice Labs emails you. The link expires in 5 minutes and works once. See Sign up.
When does my trust center go public?
Section titled “When does my trust center go public?”When you’ve paid and completed the setup form. There’s no separate publish button. See Publish your trust center.
Can I change my trust center’s address?
Section titled “Can I change my trust center’s address?”Your default address ends with a random string that can’t be changed. To share an address of your own, connect a custom domain. See Custom domains.
Content
Section titled “Content”Does Notice Labs verify my controls?
Section titled “Does Notice Labs verify my controls?”No. Controls, frameworks and documents are your statements. On the public page, controls from the Notice Labs library carry a blue star and a note that says you state they apply and Notice Labs hasn’t verified them. See Security controls.
What can I upload as a document?
Section titled “What can I upload as a document?”PDF, DOCX or an image (.pdf, .doc, .docx, .png, .jpg, .jpeg), up to 20MB. You can also
add an external link instead of a file. See Documents.
What’s the difference between Gated and Private?
Section titled “What’s the difference between Gated and Private?”A Gated document is listed on your trust center, and a visitor can request it and download it once you approve. A Private document isn’t shown to visitors at all. See Documents.
How long do document download links last?
Section titled “How long do document download links last?”30 days from the day you approve the request. On Enterprise you can choose a length from 1 to 365 days. After that a visitor sees a page saying the link has expired and can request access again. You can also revoke a link before then. See Access requests and Access rules.
Can I hide a section of my trust center?
Section titled “Can I hide a section of my trust center?”Yes: you can switch off Documents, Security, Subprocessors, Vulnerability Disclosure and Privacy Requests on the Dashboard. Your compliance frameworks have no switch; remove them from the list to hide them.
What logo formats can I use?
Section titled “What logo formats can I use?”PNG, JPG, WebP or SVG, up to 2MB. Without a logo your trust center shows your company’s initials on a coloured tile. See Settings.
Can I set my own favicon?
Section titled “Can I set my own favicon?”Yes. Upload a square PNG between 16 and 512 pixels across, or an ICO, up to 256KB. Without one, your trust center uses your logo when it is a PNG, JPG or WebP, and otherwise your company’s initials. See Settings.
Can I remove the “Trust center by Notice Labs” link?
Section titled “Can I remove the “Trust center by Notice Labs” link?”On Enterprise, yes: turn off Show Notice Labs attribution on the Dashboard. On Pro the footer always carries it. See Plans.
Can I ask visitors to accept an NDA?
Section titled “Can I ask visitors to accept an NDA?”On Enterprise, yes. Write your NDA under Access rules, then turn on Require the NDA for each gated document. See Access rules.
Can I keep my trust center out of search results?
Section titled “Can I keep my trust center out of search results?”Yes. Turn off indexing on the Dashboard. Search engines are then asked not to index the page or its documents, but anyone with the link can still open it.
Visitors and messages
Section titled “Visitors and messages”Do visitors need an account?
Section titled “Do visitors need an account?”No. Visitors read the page and download public documents without signing in. They give their details only when they use a form. See What visitors can do.
Where do alerts go?
Section titled “Where do alerts go?”To the addresses you set in Settings: one each for document requests, security reports and privacy requests. They all start as the contact email from setup. See Emails.
Can I see who subscribed with Notify me?
Section titled “Can I see who subscribed with Notify me?”Yes. Subscribers in the admin lists everyone who subscribed, confirmed or waiting to confirm, and exports them as CSV. See Subscribers.
Does Notice Labs email my subscribers?
Section titled “Does Notice Labs email my subscribers?”Yes, once a day, and only when something changed. Subscribers confirm their address first, each email has an unsubscribe link, and you choose which kinds of change are included. You can also send the waiting update straight away with Send now. See Subscribers.
Can I see how many people visit my trust center?
Section titled “Can I see how many people visit my trust center?”On Enterprise, yes. Analytics shows page views, document downloads and the requests you receive, by day, without cookies or any detail about the visitor. See Analytics.
Can I generate a data processing agreement?
Section titled “Can I generate a data processing agreement?”Create in the admin makes a data processing agreement template, a security overview and a vendor questionnaire from what is already in your trust center, as a preview and a PDF. The agreement is a template for your lawyer to review, not legal advice. See Create.
Can I delete my account?
Section titled “Can I delete my account?”Yes. Ask on Profile. Notice Labs replies within 2 business days to confirm before anything is deleted.
Can I delete a vulnerability report or privacy request?
Section titled “Can I delete a vulnerability report or privacy request?”You can archive them, and restore them from the Archived tab. There’s no delete. See Vulnerability reports and Privacy requests.
Does Notice Labs handle privacy requests for me?
Section titled “Does Notice Labs handle privacy requests for me?”No. Requests are recorded and you’re alerted, and you handle each one yourself. See Privacy requests.
Billing
Section titled “Billing”What happens if I cancel?
Section titled “What happens if I cancel?”Your subscription ends at the end of the current period, and your trust center stays public until then. After that the page goes offline. The admin keeps working, and you can choose a plan again. See Billing.
What happens if a payment fails?
Section titled “What happens if a payment fails?”The status shows Past due, your trust center stays public, and Notice Labs emails you a link to update your payment method. If payment isn’t updated, the trust center will go offline.
Can I change plan?
Section titled “Can I change plan?”Yes. Use Change plan on the Billing page. The change takes effect straight away, and Polar prorates the difference onto your next invoice.
Is tax included in the prices?
Section titled “Is tax included in the prices?”No. Polar, the payment provider, adds tax at checkout. See Plans.
About the docs
Section titled “About the docs”Something here doesn’t match what I see
Section titled “Something here doesn’t match what I see”These docs are in beta. Tell us what doesn’t match, and what you see.