Overview

TrustShare is a single place for customer assurance teams to perform the following functions:

1. Portal – Proactively share real-time security and compliance information in a controlled manner.
2. Assessments – Quickly and accurately react and respond to security assessments from customers and prospects.

Overall TrustShare helps your sales, security, and compliance teams respond to security reviews faster while giving customers transparent, always-current visibility into your program.

What you can do with TrustShare

Use TrustShare to centralize, control, and automate how you share sensitive security and compliance information with external stakeholders.

1. Publish a live, branded TrustShare portal that showcases your security and compliance posture.
2. Share policies, certifications, audit reports, and other evidence in a controlled, permissioned way within the TrustShare portal
3. Deflect security assessments by pointing customers and prospects to up‑to‑date answers and documents.
4. Reduce back‑and‑forth with sales, legal, and security teams by maintaining a single source of truth.
5. Leverage an AI agent to pre-fill security assessments quickly and accurately with a human providing oversight.
6. Manage all of your customer assurance content in a single place.
7. Get key insights into KPIs related to customer assurance. 
   

Key concepts

Understanding a few core concepts will make it easier to work with TrustShare.

1. TrustShare portal
   Your external‑facing site where customers and prospects access security and compliance information. This is a proactive place for you to share information and deflect security assessments as much as possible.
2. Documents
   Security artifacts you upload or connect from TrustCloud (e.g., SOC 2 report, ISO certificates, policies, penetration test reports).
3. External users
   Groups of external users (such as users from prospects, customers, and partners) with specific access needs and permissions.
4. Access controls
   Settings that govern who can see which documents, whether approval is required, and how long access lasts.
5. Requests
   Time‑bound invitations you send to external users to review your TrustShare content or complete due diligence.

Who TrustShare is for

TrustShare is designed for teams that need to prove security and compliance during sales cycles and vendor due diligence. Typically organizations have a customer assurance function that is responsible for this.

1. Security and compliance leaders who own certifications, audits, and policies.
2. Sales and account teams who need fast, accurate responses to security reviews.
3. Legal and procurement teams who review and approve what is shared externally.

If you are a customer evaluating a vendor that uses TrustShare, this documentation will also help you understand what you can access and how to navigate the portal.

Typical use cases

Here are common ways organizations use TrustShare.

1. Sales security reviews
   Share a curated set of artifacts with a prospect’s security team instead of answering spreadsheets from scratch.
2. Customer due diligence
   Provide current, self‑service access to your security posture for renewals, audits, and vendor management.
3. Proof of compliance
   Showcase certifications, attestations, and evidence that demonstrate adherence to frameworks (for example, SOC 2, ISO 27001, and HIPAA).
4. Q&A and follow‑ups
   Direct stakeholders to a single place for updated documents and answers instead of emailing attachments.

How TrustShare fits into TrustCloud

TrustShare is part of the broader TrustCloud platform, which centralizes your security, risk, and compliance operations.

1. TrustCloud generates and maintains many of the artifacts you publish in TrustShare (e.g., policies, controls, reports).
2. Changes to your security and compliance program in TrustCloud can automatically update what appears in your TrustShare portal.
3. Access and governance for TrustShare can align with your broader TrustCloud roles and workflows.

High‑level workflow

At a high level, configuring and using the TrustShare portal follows this flow.

1. Configure your TrustShare portal (branding, URL, default settings).
2. Select which documents and evidence you want to publish.
3. Define audiences and access rules (private, public) for different stakeholder types.
4. Invite external users and send TrustShare links as part of sales or due diligence workflows.
5. Monitor access, update content as your program evolves, and revoke access when needed.

Prerequisites and access

Before you start, ensure you have the right access and setup.

1. A TrustCloud account with access to the TrustShare module.
2. The appropriate role or permissions (for example, TrustShare admin, security owner).
3. Any required approvals or governance from your security and legal teams regarding what can be shared externally.

Contact your TrustCloud administrator if you are not sure whether you have access to TrustShare.