FYI Trust Centre
Stop answering the same security questions. Publish the answers once.
A public security page, published from the compliance record
Your trust centre shows the controls you operate, the frameworks you hold, the subprocessors you rely on and the documents you are willing to share, drawn from the record your team already maintains. Prospects self-serve, and your security team gets its week back.
Key capabilities
- Security, compliance and risk posture sections
- Subprocessor list for customers assessing their own supply chain
- Public resources and an FAQ
- Your branding and your domain
Gated documents and access requests
Sensitive documents sit behind a request. A visitor asks, giving their details and their reason; someone on your side approves or refuses; the decision is recorded against the person who made it.
Key capabilities
- Per-document public or gated setting
- Access request queue inside the portal
- Approve or refuse, recorded against the decider
- Single-document and bundled download
Subscribers and posture updates
Visitors can subscribe to be told when your security posture changes. Sending is a deliberate act, not automatic on every edit, so fixing a typo does not tell every external reviewer that something changed.
Key capabilities
- Double opt-in subscription
- Subscriber count shown, never the address list
- Sending as its own act, separate from publishing
- Unsubscribes stay unsubscribed until the person re-confirms
Proof point
Releasing a gated document sits behind a higher permission than seeing the request queue. A refusal can be reopened; a document that has been read has been read.
Questions about this
What should a trust center show?
Certifications with dates and scope, control summaries by domain, sub-processors, policy titles with review dates and a security contact. Gate the full SOC 2 report behind a request.
Can we publish the full SOC 2 report?
No. Distribution is restricted to specified parties; publish that you hold it and gate the report behind a click-through agreement.
How does the trust center stay current?
It reads certifications, control status and policy dates from your compliance record, so it changes when the record changes.
Does it shorten security review?
Yes. Buyers find the answers before sending a questionnaire, and report requests are logged so you know who is in review.