00 Trust Portal
Turn security reviews into a link.
Publish a branded Trust Center that shows your certifications, live security controls and policies, pulled straight from your packets workspace, so it never goes stale.
01 The problem
Every deal starts with the same security questionnaire.
A B2B SaaS company selling to enterprises gets asked for the same security evidence in every deal. The Trust Center is the link they put in the proposal, the RFP response and the email signature.
02 Why a Trust Center
Show your security posture. Skip the back-and-forth.
Always current, never copy-pasted.
Controls and published policies flow in from packets automatically. Publish a policy, and it appears. Disable a control, and it’s gone.
Looks like you.
Your brand color, favicon and mission statement. Serve it from your own domain, trust.yourcompany.com, with guided DNS setup and live verification.
Close deals faster.
Give buyers a self-serve view of your frameworks, controls and answers, and a simple request form for the documents you share under NDA.
03 See one
See what your buyers see.
Five tabs: Overview, Compliance, Controls, Documents and FAQs. A tab only appears when there is something to show in it, and the Request Access button is always in reach.
Click the tabs, search the controls, change the brand color.
Trust Center
Lumen Ledger
We take security seriously
Lumen Ledger recognises that the confidentiality, integrity and availability of the data we handle are vital to the success of the business and the privacy of our customers. This Trust Center provides you with artifacts to help show how we walk-the-walk when it comes to our own security, compliance, and privacy programs.
security@lumenledger.exampleCompliance
- SOC 2 Type IICompliant
- ISO 27001In Progress
- GDPRCompliant
- PCI DSSIn Progress
Controls
Access Control
- Two-step sign-in on admin tools
- Leavers lose access the same day
- Quarterly admin access review
- Contractor onboarding workflow
Data Protection
- Encryption at rest
- Encryption in transit
- Data retention schedule
Documents
- Information Security Policy
- Access Control Policy
- Incident Response Procedure
- Acceptable Use Policy
04 Part of the packets platform
Change it once, in packets.
The Trust Center is the outward-facing end of your compliance program. The controls and policies it shows are the live ones from your packets workspace, not retyped into a separate site.
Try it: switch a control off on the left, or change a policy’s state, and watch the page on the right follow.
In your packets workspaceYou work here as usual
Controls
- Access ControlTwo-step sign-in on admin tools
- Access ControlLeavers lose access the same day
- Data ProtectionEncryption at rest
- Data ProtectionEncryption in transit
- Incident ResponseBackups with a restore test
- Change ManagementPeer review for every code change
Policies
- Information Security Policy
- Access Control Policy
- Incident Response Procedure
- Data Retention Policy
On your Trust Centertrust.lumenledger.example
5 active controls across 3 categories
- Two-step sign-in on admin tools
- Leavers lose access the same day
- Encryption at rest
- Encryption in transit
- Backups with a restore test
Documents
- Information Security PolicyUpdated 3 Nov 2026
- Access Control PolicyUpdated 3 Nov 2026
Evidence
Collected in your packets workspace.
Controls
Kept in sync. Disable one and it leaves the page.
Policies
Publish one and it is listed, with its last-published date.
Trust Center
The public page your buyers open.
05 Set up in minutes
Switch it on. Make it yours. Share the link.
- 01
Switch it on
In Settings → Trust Portal; we create your URL.
- 02
Pick your frameworks
Set each one to Compliant or In progress.
- 03
Make it yours
Brand color, favicon, mission, FAQs, links and your custom domain.
- 04
Share the link
Controls and policies stay in sync as your program evolves.
Settings → Trust Portal
- SOC 2 Type IICompliant
- GDPRCompliant
- ISO 27001In progress
- HIPAAIn progress
06 Your domain, your color
Serve it from your own domain.
Custom domain · guided setup
- CNAMEtrust.yourcompany.com → the target shown in Settings
- TXT@ → packets-domain-verification=<your organization ID>
Live at https://trust.yourcompany.com
- 01
Brand color. One accent color runs through the whole page. The layout and light theme stay fixed.
- 02
Favicon. Appears in the browser tab and as the logo mark in the hero.
- 03
Mission statement and contact email. Shown at the top of the page and in the footer.
- 04
Custom links. Your status page, support site, DPA, or anything you need in the footer.
07 What’s included
What’s included
Compliance badges
SOC 2 Type I and II, ISO 27001, GDPR, HIPAA and PCI DSS, with a clear status: Compliant or In progress.
Live controls library
Searchable, filterable by category, and synced from your controls.
Policy and procedure index
Auto-listed from your published policies, with last-updated dates.
Request-access form
Name, company, work email and reason, sent as an email notification.
FAQ builder
Up to 50 questions, with answers you can reorder.
Custom domain
CNAME and TXT setup, verified in the app.
Branding
Brand color, favicon, mission statement and contact email.
Custom links
Your status page, support site, DPA, or anything you need in the footer.
Publish or unpublish
One switch to go live when you are ready, and back to draft if you need to.
Permissions
Only users with Trust Portal access can edit. Guests are read-only.
08 Questions
Questions about the Trust Portal
01What is a Trust Portal / Trust Center?
A public page where you show customers and auditors your security and compliance posture (frameworks, controls, policies and FAQs) in one place.
02Does it update automatically?
Controls and published policies do. Framework status, FAQs, links and branding are set by you in Settings.
03Can we use our own domain?
Yes. Add a CNAME and a TXT record; packets verifies them and shows the status live.
04Can visitors download our policies?
Policies are listed publicly, but the documents themselves are shared on request through the Request Access form.
05Which frameworks can we show?
SOC 2 Type I and II, ISO 27001, GDPR, HIPAA and PCI DSS.
06Can we unpublish it?
Yes. One switch returns it to draft and the page stops being public.
07Who can edit it?
Members with Trust Portal update permission. Read-only guests can't.
08Is it mobile friendly?
Yes.
09 Get started
Turn security reviews into a link.
Show your certifications, live controls and policies on a page that stays up to date by itself.