Plain-language guides to compliance, supplier risk and trust.
What is a trust centre?
A trust centre is a public page where a firm shows customers, partners and regulators how it protects their data and runs its compliance programme — so they can check for themselves instead of sending another questionnaire.
Trust centres for regulated firms and their suppliers
Banks, insurers and payment firms must check every supplier they rely on — and are checked themselves. A trust centre serves both directions: it answers your customers’ supplier checks, and it is what you hope to find when you check yours.
Sharing audit reports and certificates with customers
Independent audit reports and certificates are among the most requested documents in a security review. Share them deliberately: the right version, to the right people, on terms that protect you.
Answering security and compliance questionnaires
Most questionnaires ask the same few hundred questions in different words. Answer them from one maintained set of controls and they stop being a project each time.
Subprocessor transparency
Under GDPR your customers are entitled to know which third parties process their personal data on your behalf. A clear, current subprocessor list is now a basic expectation in any review.
Third-party risk management, explained
Third-party risk management is how a firm decides which suppliers it can rely on, how closely to check each one, and how to keep checking. For regulated firms it is an obligation, not a preference.