Trust Center

Share your security and compliance status

A public page, linked from your website, where customers, partners and investors find your certifications, controls, documents and subprocessors, with your logo and your own tagline.

Qalea Trust Center showing certifications and frameworks, security controls by area, and counts of documents and subprocessors
On your Trust Center
Certifications5
Documents5
Subprocessors
6 listed with their location
Trust Center page

What your customers see

Certifications and frameworks. The certifications you hold and the frameworks you work with, such as ISO 27001 or ENS, at the top of the page.

Security controls. Linked to the platform, so the page shows the controls you have implemented. Until your controls are complete, you can keep this section hidden.

Documents. Public documents to download, and private ones available on request.

Subprocessors. The providers that process your customers' data, and where that data is hosted.

Trust Center documents list with public documents and documents available under NDA
Trust Center subprocessors list with the purpose and location of each provider
Documents

Public documents and documents under NDA

Public

Documents anyone can download directly from your Trust Center, such as your information security policy.

Under NDA

Certificates, the Statement of Applicability and other confidential documents. Visitors request them with a form (name, work email, company, documents and reason), and nothing is shared until the request is reviewed.

Documents under NDA

How a request is handled

Confidential documents are never downloaded directly. Every request follows the same four steps.

1

Request

A visitor requests one or several documents, with their name, work email, company and reason.

2

Receive

Your Security Manager receives the request and sends it to you.

3

Approve

You approve the request once the NDA is in place.

4

Share

The approved documents are shared with the requester.

Always up to date

Kept current by the platform

The Trust Center reads from the same platform where you run your compliance program. When a control is completed or a certification is renewed, the page shows it without anyone editing a website. The same controls and documents also prefill your security questionnaires.

Setup

Set up with your Security Manager

Your Security Manager sets up the page with you: your logo and tagline, the standards you show, whether the controls section is visible, and your subprocessors.

Then add a link in your website footer, under a section such as Security or Trust Center.

Logo
Tagline
Frameworks
Security controls
Documents
Subprocessors
Trust Center header with the company logo and tagline
Request document access form a customer fills in on the Trust Center
Certifications and frameworks shown on the Trust Center
Your website footer
Security
Trust Center
FAQs

Trust Center questions, answered

What is a Trust Center?
A public page where a company shows its certifications, security controls, documents and subprocessors, so customers and partners can check its security and compliance status in one place.
Which documents should be public and which under NDA?
Policies you are happy to share, such as your information security policy, can be public. Certificates, the Statement of Applicability and other confidential documents are better kept under NDA, so they are only shared after a reviewed request.
Which providers count as subprocessors?
Providers that store, process or transmit the personal data your customers entrust to you, such as cloud hosting, storage and backup, email and notification services, or support tools where customers share data. Tools used only internally, such as payroll or design software, are usually left out.
Does a Trust Center replace security questionnaires?
Not always. It answers the questions customers ask most often, but some will still send their own questionnaire. In Qalea, questionnaires are prefilled from the same controls and documents your Trust Center shows.
Still have questions?
Our support team can help you out.
Contact our experts