Glossary
What is a trust center?
A trust center is a page or portal on a company’s website that brings together its security, compliance and privacy information, such as certifications, policies, subprocessors and audit reports, for buyers and their security teams.
Also called security page, trust portal
Why it matters for B2B websites
When a company buys software, its security team usually sends a questionnaire and asks for proof: audit reports, policies, penetration test summaries. Answering the same questions for every deal slows sales. A trust center answers the common ones up front and lets buyers request the private documents in one place.
For AI companies, it is also where buyers look for answers about how customer data is used, whether it trains models, and where it is processed.
What to include
- A plain summary of how you protect customer data
- Certifications and reports, such as SOC 2 or ISO 27001, with how to request them
- Subprocessors and where data is stored
- Policies: privacy, data processing agreement, acceptable use, responsible disclosure
- For AI products: data retention, model training and data use
- Service status and incident history, or a link to them
- A contact for security questions
Public and gated content
Summaries, policies and the list of certifications are usually public. Detailed reports, such as a SOC 2 report, are shared under a non-disclosure agreement, often through a request form or an access-controlled portal. Tools such as Vanta, Drata and SafeBase offer hosted trust centers that connect to compliance data.
Example
A buyer’s security lead opens /trust, sees the SOC 2 Type II badge, the subprocessor list and a data use statement for the AI features, and requests the full report by signing an NDA online. Half the questionnaire is answered before the first call.
How we handle it
We design trust and security pages as part of enterprise website design projects: written for both the buyer and their security team, linked from the footer and the pricing or enterprise pages, and connected to the hosted trust tool if you use one. We only publish claims your compliance team has confirmed.
Last updated 15 November 2026
