Your trust page is a public security page at cloudsignlab.com/trust/ followed by your address. Customers can see your security status for each area (in place, in progress or planned), your valid certificates and the titles of your published policies, and ask for your documents. Documents are shared only after a request is approved, and every download is logged.
How to set up the trust page
- In your organization, open Trust page in the menu (owners and admins) and stay on Settings.
- Choose the Address: lowercase letters, numbers and hyphens.
- Write a Headline and an Introduction, and enter your Security contact email.
- Under What the page shows, choose Security status, Certificates, Policies and Documents on request. Policy texts stay private; only titles and versions are shown.
- Under Documents, tick the evidence with a file you want to offer. Expired evidence is left out automatically, and valid certificates among them appear under Certificates.
- Enter your Confidentiality terms, or leave them empty to use the standard text.
- Switch on Publish the trust page, click Save and check it with Open the public page.
How document requests work
- A visitor gives their name, work email, company and, optionally, a reason, and accepts your confidentiality terms.
- Owners and admins are notified. On the Requests tab, click Approve or Reject.
- An approved visitor gets a personal link by email that works for 7 days.
With Approve requests automatically, the link is emailed at once; you still see every request and download.
Tips
- The Downloads tab shows when, who and which document; no IP address is stored.
- Switching the page off makes the address show nothing, and nobody can ask for documents.
- Keep your controls and evidence up to date: the page shows their current state.
- The trust page is part of every package.