™
Answer the security questionnaire once.
A public trust center that shows your security posture to prospects and customers, so your team stops re-answering the same forty questions.
The questionnaire treadmill
Every deal above a certain size now comes with a security review. A spreadsheet arrives, someone spends two days on it, and the answers go into a black hole — until the next prospect sends a near-identical spreadsheet the following week.
Meanwhile the questions are almost always the same: are you SOC 2? where is the data? who are your subprocessors? can we see your pen test report?
A trust center flips that around. You publish the answers once, in public, and point buyers at a page instead of starting from scratch each time. The genuinely sensitive material stays behind a gate — but a gate you control, that logs every access, and that does not need you in the loop at 9pm.
Public where it helps, gated where it matters.
Publish your posture
Certifications, security practices, subprocessors and FAQs on a branded public page. Editable content blocks mean you shape it to your business rather than filling in someone else's template.
Gate the sensitive documents
Reports that should not be public sit behind an NDA-gated request. Approve or decline, and approved requesters get an expiring magic link rather than an attachment that lives in their inbox forever.
Know exactly who saw what
Every access is logged. When someone asks who has your SOC 2 report, you can answer precisely instead of guessing at a year of email.
How it works
- Publish what is safe to publish. Certifications, your security practices, the subprocessors you rely on, and answers to the questions you already get asked.
- Upload the documents that need a gate. Audit reports, penetration test summaries, insurance attestations.
- A prospect requests access. They accept your NDA terms as part of the request, so the paperwork happens up front rather than over three emails.
- You approve or decline. Approved requesters get a link that expires; declined ones get nothing.
- The access trail builds itself. Who asked, what you decided, what they opened, and when.
Ours lives at trust.opengrc.com, built with the same feature you get. Have a look at what it does before you decide whether you want one.
Trust center questions
Is the trust center a separate product?
No. It is included with OpenGRC Enterprise at no extra cost. Several vendors sell a trust center as its own subscription; we do not.