Skip to main content

Trust Center

The Trust Center is a public portal intended to be viewed by your customers and prospects, where you share your security posture, compliance certifications, and data protection practices. Instead of responding to security questionnaires one by one, you give customers and prospects a single place to find the information they need.

Every sales cycle involves security questions: prospects want your System and Organization Controls 2 (SOC 2) report, your certifications, and to know who processes their data. Publishing the answers once, publicly or behind an NDA, lets prospects self-serve what your security team would otherwise handle request by request, and the subprocessor list satisfies the disclosure obligations regulations like General Data Protection Regulation (GDPR) impose.

Migrating from another trust center​

Moving from another trust center does not mean starting over with the customers and prospects who already rely on it. The record of who signed your NDA and who subscribed to your updates comes with you, along with the content you already published, and we pull your branding from your website. See Migrating from another trust center for the recommended steps.

What you can share​

Documents​

Upload security documentation like SOC 2 reports, International Organization for Standardization (ISO) certifications, penetration test summaries, and security policies. Control who can access each document:

  • Public: Anyone can download
  • Private: Requires signing an NDA first

Frameworks​

Display the compliance certifications you've achieved (SOC 2, ISO 27001, Health Insurance Portability and Accountability Act (HIPAA), etc.). Only enable frameworks you've actually completed; this is a trust signal to customers.

Subprocessors​

List the third-party services that process customer data on your behalf. This transparency helps customers with their own compliance and vendor management.

FAQs​

Answer the security questions buyers ask most, grouped by category, so prospects get answers without waiting on a questionnaire. See FAQs.

Updates​

Share brief announcements about new certifications, policy changes, or security improvements. This shows active security management.

Preview and publish​

Changes you make aren't immediately public. The Trust Center uses a draft/publish workflow:

  1. Make changes in the console
  2. Preview them using the preview URL
  3. Publish when you're ready to go live

This lets you review changes before customers see them.

Your Trust Center URLs​

  • Default URL: https://trust.theopenlane.net/{your-organization-slug}
  • Vanity Domain: Your custom domain (e.g., https://trust.yourcompany.com) if configured

Both URLs work, even after setting up a vanity domain.

Search engine visibility​

Your preview site is always hidden from search engines, so drafts never show up in Google results.

Your default URL is also hidden from search engines when your Trust Center is created. When you want it to appear in search results, turn off Hide from search engines on the domain settings page. With a vanity domain, leave the setting on so search results point to your own domain instead of the Openlane URL.

The setting applies only to the default URL and never hides your vanity domain.

In this section​

  • Branding: Customize the look and feel
  • Custom Domain: Set up a vanity domain
  • Documents: Manage security documentation
  • Frameworks: Display compliance certifications
  • Controls: Publish selected security controls
  • Subprocessors: List third-party data processors
  • FAQs: Answer common security questions
  • Updates: Share security announcements
  • Notifications: Let visitors subscribe and keep them informed of changes
  • Customer Logos: Display customer logos with their permission
  • NDAs: Configure NDA requirements for private documents
  • Analytics: See how visitors engage with your Trust Center