A security company is judged by how it handles its own trust page. Customers look for certifications with dates, a subprocessor list, how data is handled, how the AI uses customer data, and a real contact for security reports. In our audit of 114 YC AI company homepages (13 Oct 2026), 66 link to a security, trust or compliance page and 38 mention SOC 2. Pentaclay designs and builds these pages. Your team supplies the facts and documents. We never issue or imply a certification. Pentaclay is a B2B website design agency for AI companies, registered in New Mexico, USA.
What enterprise customers check on an AI security site
Security reviewers ask the same questions every time. Answer them on the page.
Certifications, with dates
What you hold today, and what is in progress with an expected date.
Data handling
What you collect, where it is stored, how long you keep it, how it is deleted.
AI and customer data
Whether you train on it, which model providers see it, and any zero-retention option.
Subprocessors
Every vendor that touches customer data.
Access and login
SSO, user roles, multi-factor login and audit logs, if you offer them.
Documents on request
Security report, pen test summary, DPA, and how to ask for them.
A real security contact
An email for questions and for reporting a problem.
Who already uses it
Security teams or companies a reviewer can check.
B2B websites we’ve launched
Our most recent work for B2B teams.
Machine Football AI
B2B
Sports AI
2026
Clubs see the scale of the model before they read a word
An AI model of football is hard to picture. So the first screen leads with one number: 1.1 billion on-pitch events. The team publishes blog posts, media and glossary terms without a developer.
Families and schools wanted different things from one site. Families download a free app. Schools book a demo. A “Choose your path” choice on the first screen sends each one the right way.
Universities, brands and athletes each get a page made for them
One platform, three audiences: universities, brands and athletes. We built their design: a first screen that cycles through all three, a page for each, and a news room the team runs.
“Working with Kazi was great, and we’re very pleased with the outcome.”
Nima NejadChief Creative Officer, NOCAP Sports
Freehold Wealth
B2B
Property finance
2026
Investors and borrowers each get their own first step
One lender, two audiences with opposite goals. Investors put money in. Borrowers take it out. So the first screen gives each one a button of their own, and every deal gets a page the team edits itself.
You sell AI security or cybersecurity to companies with a security team.
Your trust facts exist, or are in progress with a date.
You want one site where the product story and the trust center agree.
Not for you if
You need an audit or a certification. The audits and certifications are yours. We build the pages that show them.
You want a hosted trust portal tool. Tools such as Vanta, Drata, SafeBase and Whistic host those. We build the security page on your site and link the portal.
What is the difference between a trust page and a trust center?
A trust page is one page on your site that answers the security, privacy and compliance questions reviewers ask. A trust center is the bigger version: a portal where customers can also download reports, often after signing an NDA.
Our SOC 2 is not finished. What should the site say?
Say where you are, and give a date as soon as you have one. For example: “SOC 2 Type II audit in progress. Type I report available on request.” An honest answer beats silence.
Can our trust portal stay in Vanta or Drata?
Yes. Keep the portal in your tool. We build the security page on your site, link the portal from the footer and the right pages, and make the page readable by Google and AI search.
Will you say we are compliant?
No. Every claim comes from your team in writing, and your team approves the final copy. We never decide what is true or claim a client is compliant.
How long does it take?
A full website usually takes 6 weeks, and we can work faster if your date needs it. A landing page takes 2 to 3 weeks. The date goes into the contract.
Pentaclay is a B2B website design agency for AI companies that sell to enterprises. We write, design and build marketing websites in Framer, Webflow and Next.js, and stay to help after launch. Pentaclay LLC is registered in New Mexico, USA; our team works from Dhaka, Bangladesh, with calls until 12:30pm US Eastern. Founded in 2023 by Kazi Mohammed Erfan, who brings 12 years of design experience.