We strongly recommend only sharing your SOC 2 report under NDA, since it contains sensitive information regarding your security posture.

If your Terms of Service includes a confidentiality clause then your existing customers will not need to sign an additional NDA, but you'll want to remind them that the report is confidential. 

Showcase your Security Posture 

While sharing in the traditional way is still relevant, please also considering showcasing your security posture more efficiently only with our Secureframe Trust Center!

Proactively share security, compliance, and privacy information with customers and prospects. Remove friction from the end-to-end security review process, and turn your security posture into a competitive advantage.

Easily manage requests for documents

From your Trust Center, visitors can self-serve or request sensitive security documents. Admins at your organization can review/approve/deny requests and enforce an NDA for resources in the requests dashboard, streamlining the process for both you and your Trust Center visitors.

Customize Trust Center to your brand

Your Trust Center is fully customizable - set up a custom domain with your organization's logo and colors, and adjust any design components with custom fonts, custom domains, and CSS. This ensures that your Trust Center reflects your organization's branding and provides a seamless experience for prospects and customers.

Frequently Asked Questions (FAQ)

Does Secureframe have an example of the Trust Center?

• Yes, you can visit our real Trust Center here. 
• You can also try a free version in your Secureframe platform today by visiting the Trust Center in your left navigation. 

Where can I request Secureframe's SOC 2 or ISO report?

• You can safely and securely request our compliance reports at our Trust Center here. 

How do I get access to my own SOC 2 report so I can upload it into Secureframe Trust Center?

• SOC 2 reports (or any compliance report or certiciation) will be granted to customers via their audit partners after the audit has concluded and the report is complete.
• Secureframe will not have access to your SOC 2 report post audit unless you share it with us, or ask an auditor to share the report with us.