The security page your customers ask for.
Publish your privacy notice, cookie policy, terms, imprint and subprocessor list — versioned, hosted in the EU. When a customer asks for a document that should not be public, the trust center is the upgrade.

Core features
The pages a security questionnaire asks for, published in one place.
Version history, kept
Every change, to a document or a subprocessor, is published in a dated release, and every version is kept. Group several changes to publish them at once or on a date you choose. A customer asks what your policy said last March? You pull it from the console.
Subprocessor alerts
When your subprocessor list changes, an announcement draft is ready. You review it, and your subscribed customers receive it by email.
Access requests under NDA
A restricted document opens only once the NDA is signed and you approve the request. You see every request and where it stands.
- Penetration test
- NDA to sign
- Security policy
- NDA signed
- Risk assessment
- Access granted
Document Management
A public privacy notice and subprocessor list, and the document you only open on request — as PDF or Markdown. In Markdown, you compare two versions side by side and see exactly what changed.
v3
## Data retention
v4
## Data retention
Added: Access logs are kept for 6 months.Why Squaretrust?
A link, not attachments
The PDF you sent six months ago still sits in an inbox, out of date. A link to your page always shows the current version.
A log of your changes
Your page keeps a dated log of what changed. A scheduled subprocessor shows up there before it arrives, among the upcoming changes: the notice your customers expect, in plain sight.
Built for a small company
No compliance platform to roll out, no audit to pass first. You publish the documents you already have, and keep them current.