Introduction
What a trust center is
Section titled “What a trust center is”A trust center is a public page where a company shows its customers and prospects how it protects their data. Instead of answering the same security questions one email at a time, you publish the answers once: the controls you run, the documents you can share, the vendors that process customer data and the ways to reach you about security and privacy.
Notice Labs gives you one. You fill it in from an admin area, and Notice Labs hosts the public page, either at an address it gives you or at your own domain.
What is on your trust center
Section titled “What is on your trust center”Each trust center has a Home tab and up to three more tabs, plus a few forms.
| Part | What it holds |
|---|---|
| Home | Your name and introduction, featured items, your compliance frameworks and the privacy and vulnerability cards |
| Documents | Policies, reports and certificates. Each one is public, available on request, or hidden |
| Security | Your security controls, grouped by the question a buyer asks |
| Subprocessors | The vendors that process customer data for you, with their purpose and region |
| Privacy requests | A form for visitors to ask to access, correct, delete or export their data |
| Vulnerability disclosure | A form for anyone to report a security issue |
| Notify me | A button that lets visitors subscribe to an email when your trust center changes |
You choose which of the Documents, Security, Subprocessors, privacy and vulnerability sections are shown. See Dashboard.
Who Notice Labs is for
Section titled “Who Notice Labs is for”Notice Labs describes its plans this way:
- Pro is for software companies running customer security reviews. It includes one trust center.
- Enterprise is for groups and companies with more than one product, brand or team.
See Plans for the full lists and prices.
Things worth knowing first
Section titled “Things worth knowing first”- You make the claims. The controls, compliance frameworks and documents on your trust center are statements by your company. Controls taken from the Notice Labs library carry a mark on the public page that says you state they apply and that Notice Labs hasn’t verified them. Only add what is true for your company.
- It goes public when you subscribe. There is no separate publish button. See Publish your trust center.
- Sign-in uses email links. There are no passwords. See Sign up.
How this guide is organised
Section titled “How this guide is organised”- Start here takes you from signing up to a live page.
- Your public trust center describes the page from a visitor’s side.
- Admin guide has one page for each area of the admin, in the order of its sidebar.
- Reference covers the plans, the emails Notice Labs sends and common questions.
- Release notes list what changed and when.