GuidesPublish your Trust Center page
On this page0

Guide

Publish your Trust Center page

Put up one public web page that tells your own customers and prospects how your company looks after their data, choose exactly what it shows, and take it down again when you need to.

For: AdministratorPlan: Advanced

Before you start

  • A role that can manage compliance. In the built-in set, administrators have that permission. The “security_analyst” role has it too; no group carries it, so an administrator gives it to a person by hand, as Roles, groups and permissions shows. Someone who can only view reports can open the window, which then reads “Read-only — needs Manage compliance to edit or publish.”
  • The Compliance Hub already set up, with the frameworks you are working toward chosen. See Get started with the Compliance Hub.
  • Your company name and logo set, because the page prints them. See Brand your instance.
  • An email address at your company that should receive requests for security documents.
This is your company’s page, about your company, for the people you sell to. It is separate from the Trust Center on the Zonitix website, which is about Zonitix. Anyone who has the address can read your page without signing in, so treat every word on it as published.
Nothing is public until you click “Publish”. Until then the page does not exist: its address answers that no trust center is published.

Write the page

  1. Step 1: Open the Trust Center window

    Go to Security & ComplianceCompliance Hub and click the “Auditor room” tab. The “Trust Center” card reads “Draft” and “Not public yet”. Click “Edit Trust Center”.

    A window titled “Your public Trust Center” opens. The strip at the top shows “Not published” and the address the page will have.

  2. Step 2: Write the headline and introduction

    “Headline” is the large line at the top of the page, up to 140 characters. If you leave it empty, the page prints your company name followed by “security & compliance”. “Intro” is the paragraph under it, up to 1,000 characters.

  3. Step 3: Choose the frameworks to show

    Under “Frameworks to show”, click each framework you want named on the page, up to eight; a chosen one is filled in. Click it again to take it off. Each appears on the page as a card with the words “In program”.

    The switch “Show a readiness % on each framework” replaces “In program” with that framework’s readiness percentage from your hub.

    Leave that switch off unless you are happy for the number to be public. It is your live figure, so it goes down on the page when it goes down in the hub. Naming a framework says you are working toward it. It does not say you are certified, and the page should not be worded as if it did.

  4. Step 4: List your security practices

    Next to “Security practices”, click “Add”. Two boxes appear: a short title (up to 80 characters), for example “Encryption everywhere”, and “Detail (optional)” (up to 240 characters). Add one row per practice, up to 20. The bin button removes a row, and a row with no title is not saved.

    The switch “Auto-add practices from passing controls” adds ready-worded lines for you, each only while the matching control in your hub is passing: multi-factor authentication, device encryption, backups and disaster recovery, security monitoring, and prompt offboarding. They are listed after your own, and one with the same title as yours is not repeated.

    The ready-worded lines are written by Zonitix, not by you, and they appear and disappear as controls pass and fail. If you switch this on, read the public page after publishing and make sure every line on it is true of your company.

  5. Step 5: Add a contact address

    Type an address in “Contact email (for report requests)”. The page then shows a button, “Request our security documentation”, which opens an email to that address. With no address, the page has no button.

Publish and check

  1. Step 6: Save a draft, then publish

    Click “Save draft” to keep your work without making anything public. The message reads “Draft saved (not published).”

    When the wording is ready, click “Publish”. The message reads “Published — the page is now public.” and the strip at the top changes to “PUBLISHED”.

  2. Step 7: Read the public page

    In the strip at the top, click the button whose tooltip reads “Open the public page”. The page opens in a new browser tab. Check it as a stranger would: your logo and name, the headline, each framework card, each practice, and the contact button. Its last line names your company and says the page is powered by Zonitix.

    The button beside it, “Copy link”, copies the address so you can send it to a customer or link to it from your website.

Change it or take it down

  1. Step 8: Edit a published page

    Once the page is public, the save button reads “Save changes (live)”. There is one saved copy, and the public page shows it, so a save is public at once. The message confirms “Saved — your changes are live on the public page.”

    To prepare new wording out of sight, click “Unpublish” first, edit and “Save draft”, then “Publish” when it is ready. The page is offline in between.

  2. Step 9: Take the page down

    Click “Unpublish”. The message reads “Unpublished — the public page is offline. Your edits are kept as a draft.” From that moment the address no longer shows the page, and nothing you wrote is lost.

What you should see

On the “Auditor room” tab, the “Trust Center” card reads “Published” in place of “Draft”, with the line “Prospects can see your public security page” in green.

The public page shows only what you chose: the headline and introduction, the frameworks you ticked, your practices and the contact button. It does not list your controls, your evidence, your policies, your risks or your vendors.

If something goes wrong

The "Open the public page" button is greyed out
The page is not published. Its tooltip reads "Nothing to open yet — the public page exists only once you publish." There is no preview of a draft: click "Publish", read the page, and click "Unpublish" straight away if something is wrong.
The address says no trust center is published
The page was unpublished, or never published. Open the window and click "Publish".
The window shows an error instead of the form
The saved page could not be read, so the form is held back: saving an empty form would replace your page with blanks. Click the retry button in the window.
A practice you did not write is on the page, or one has gone
"Auto-add practices from passing controls" is on. A line is added while its control passes in the hub and dropped when it stops passing. Switch it off to show only the practices you typed, then click "Save changes (live)".
The page shows the wrong company name, or has no logo
The page prints the company name and logo saved in Zonitix. Set them as described in Brand your instance. The page reads them each time it is opened, so there is nothing to republish.
The fields are greyed out and there is no Publish button
Your role can read the Trust Center settings but not change them. Ask an administrator for a role that can manage compliance.

Still stuck? See When something goes wrong, or Contact Zonitix support.

Where next

Previous
Keep your risk register and vendor register
Next
Run, save and share a report