Skip to content
TrustShot

Features

A Trust Center that does the work.

Not a logo wall. The sections a security reviewer actually opens, the controls that keep your audit reports from circulating uncontrolled, and the fields Indian regulation expects to see.

What you publish

Everything a reviewer looks for, in one place.

A Trust Center is only useful if it answers the question before it is asked. These are the sections your buyers actually read, each editable by your team without a developer.

Certifications
ISO 27001, SOC 2, PCI DSS and others, with scope and validity — and your own certification marks where you hold them.
Audited by
Name the certifying bodies and assessors. A certification with no named certifier carries noticeably less weight.
Security controls
Grouped across data protection, access control, infrastructure, application security, monitoring, continuity, people and governance.
Sub-processors
Who processes customer data on your behalf, what they process, where they sit, and a link to each DPA.
Data handling
Residency, encryption at rest and in transit, retention, deletion, backups and your incident notification commitment.
Reliability
Uptime against your SLA, recovery objectives and a link to your status page — trust is availability as well as security.
Roadmap and updates
What you are building, and a changelog so a returning visitor can see something changed.
FAQ and policies
The questions your team answers repeatedly, plus links to your DPA, Terms, Privacy Policy and vulnerability disclosure.

Restricted documents

Share the SOC 2 report without losing control of it.

Public documents download freely. Sensitive ones go through verification and an NDA, then open in a viewer designed so that the file itself never leaves your control.

Work email only
Free providers such as Gmail and Yahoo are refused before a code is even sent.
One-time code
The visitor proves they control the address they claim.
NDA acceptance
External visitors accept your terms before anything opens. Your own staff skip it.
Watermarked viewer
Pages render as images stamped with the viewer’s email and timestamp. Download, print and copy are disabled.
72-hour access
Grants expire automatically, checked server-side on every page view rather than trusted from the browser.
Full access log
Who opened which document, which pages, and when — exportable for your own audit.

Who can grant access

Sales should not wait on an administrator.

Three routes in, each logged, so the common case is fast and the unusual case still gets reviewed.

Your own staff
Anyone verifying an email on your company domain gets immediate access with no NDA and no expiry.
Employee-granted
A verified employee grants a named client access to specific documents without an admin in the loop.
Cold request
An unknown visitor’s request queues for an administrator to approve or decline, with a reason recorded.

India-first

Built for the questions Indian buyers ask.

The things a global trust-centre product has no field for, because its customers were never asked.

Data stays in India
Stored and processed on Indian infrastructure, not replicated outside Indian territory.
DPO and Grievance Officer
Named, contactable officers published on the page, as the DPDP Act and IT Rules expect.
Regulatory alignment
RBI, SEBI, CERT-In and DPDPA presented as first-class frameworks with your posture against each.
CERT-In timelines
Publish your incident notification commitment, including the six-hour reporting obligation.

Your brand

It should look like your company, not like ours.

Your logo, your colours, your domain. The only mention of us is one line in the footer, and paid plans remove it.

Your own subdomain
trust.yourcompany.com, with HTTPS issued and renewed automatically at no cost.
Brand bar
Your logo linking back to your site, your navigation links and your call to action.
Hero and accent colours
Set independently. Heading text switches between light and dark automatically so it stays readable.
Reorder any section
Drag sections into the order your buyers care about. Hide what is not relevant yet.

Publish it this week.

Start free, keep your data in India, and send a link instead of a spreadsheet.

Start free