Trust Center

A publicly accessible page that communicates your compliance posture to prospects, customers, and partners — without requiring them to create an account or sign an NDA.

What is a Trust Center?

A Trust Center is a public-facing webpage that shows your organisation's compliance certifications, active security policies, and overall control readiness score. It serves as a self-service resource for:

• ✓ Prospects evaluating your product during security reviews
• ✓ Customers who want to verify ongoing compliance status between formal audits
• ✓ Enterprise buyers who require vendor security documentation before procurement
• ✓ Partners assessing third-party risk for their own compliance programs

Rather than repeatedly sending static PDFs or answering the same security questionnaire questions, you can share a single Trust Center URL that always reflects your current compliance state.

Enabling the Trust Center

The Trust Center is disabled by default. Only an ADMIN user can enable it.

1. Navigate to Trust Center Settings

   In the sidebar, click Trust Center. You'll see the settings page (accessible to ADMIN users only).

2. Choose a slug

   Enter a URL-friendly identifier for your organisation (e.g., acme-corp). This becomes the last segment of your public URL:

   Public URL format

   https://app.zgovern.com/trust/acme-corp

   The slug must be lowercase, contain only letters, numbers, and hyphens, and be unique across all zGovern organisations.

3. Toggle "Make Public"

   Flip the isPublic toggle to on. The Trust Center page is now live and accessible to anyone with the URL — no login required.

4. Add a custom message (optional)

   You can add a custom introductory message that appears at the top of your Trust Center. This is a good place to include:

   • A brief description of your security program
   • Contact information for your security team
   • Links to your full privacy policy or DPA
5. Share the URL

   Copy the public URL and share it with prospects, customers, or include it in your questionnaire responses and marketing materials.

What Visitors See

The public Trust Center page (/trust/:slug) displays the following information — no authentication required:

Settings Reference

API Endpoints

{
  "success": true,
  "data": {
    "slug": "acme-corp",
    "isPublic": true,
    "customMessage": "We take security seriously. Contact security@acme.com for questions."
  }
}

{
  "slug": "acme-corp",
  "isPublic": true,
  "customMessage": "We take security seriously..."
}

{
  "success": true,
  "data": {
    "orgName": "Acme Corp",
    "customMessage": "We take security seriously.",
    "frameworks": [
      { "name": "SOC 2 Type II", "controlCount": 63, "completeCount": 58 }
    ],
    "controlReadinessScore": 92,
    "activePolicies": [
      { "title": "Access Control Policy", "publishedAt": "2026-03-01T09:00:00.000Z" }
    ],
    "lastUpdated": "2026-03-08T06:00:00.000Z"
  }
}

Use Cases