Trust Centre
Your customers will ask how you protect their data: which policies you have, which frameworks you’ve assessed against, which suppliers handle their data, and for documents such as your evidence pack. The Trust Centre is a public page that answers those questions, at 786cyber.com/trust/your-name. It is free on every plan and carries a small “Trust Centre by 786 Cyber” mark.
Find it under Policy & Process → Trust Centre (/trust-centre).
Nothing is public until you publish it
Section titled “Nothing is public until you publish it”- The page itself is off until you tick Page is live and save.
- Every policy, framework result and sub-processor has its own Published switch, and all of them start off.
- The Preview on the right shows exactly what visitors will see, built from the same list of published items.
Admins and security leads can change the Trust Centre. Viewers can see the settings and preview.
What you can publish
Section titled “What you can publish”Your page. Choose the address, the name shown (it defaults to your organisation name), a short introduction and a security contact email.
Policies. Any active (finalised) policy in the Policy Vault: its title, version and when it was last updated. Optionally offer the PDF.
Framework results. For each assessment: the self-assessment score with the date it was assessed. Add the date you submitted it to the certifying or assessing body, and once the certificate is issued, upload it to the Evidence Vault with its expiry date and choose it here. Visitors then see Submitted, awaiting certificate, Certificate issued, valid to … or Certificate expired. Scores are always labelled as self-assessments and dated, never shown as live.
Sub-processors. Suppliers from your supplier register: name, what they provide and where data is hosted.
Security posture (optional). Your MFA coverage and when your external attack surface was last scanned.
Documents on request
Section titled “Documents on request”Choose Evidence Vault items that visitors can ask for, for example your framework evidence pack or a penetration test summary. Visitors fill in their name, work email and company and tick the documents they want. Your admins get an email, and the request appears under Requests.
- Approve emails the requester personal download links that expire after 7 days.
- Decline closes the request. Nothing is shared until an admin approves.
Every approval and download is recorded.