public · no login · always current

Turn compliance
into a sales asset

Security review is where deals go to die. A prospect sends a 200-row questionnaire, someone spends three days on it, and the answers were true last quarter. Your Trust Center is a public page you send instead — generated from your live ISMS, so it can't go stale.

trust center

A link you can send mid-deal

One public URL, no account needed, showing your readiness, your control coverage, your frameworks and the assurance behind them. On Scale it runs on your own subdomain, so it reads as yours rather than ours.

  • Readiness seal and control breakdown
  • Framework coverage — ISO 27001, POPIA, SOC 2, NIST, CIS, GDPR
  • Assurance status: internal audit, management review, last pen test
  • Published policies, without the internal detail
  • White-label subdomain on Scale
  • Nothing sensitive leaves — you choose what's published
trust.yourcompany.co.zapublic
ISO/IEC 27001:2022 readiness87%
POPIA alignmenttracked
Last internal auditAug 2026
Last penetration testJul 2026
Open major nonconformities0
Sub-processors published7
questionnaires

Auto-answered from live control state

When a questionnaire does have to be filled in, Xee drafts the answers from the controls themselves — implementation status, owner, evidence, review date. You review and send rather than start from a blank column.

  • Answers drawn from the control register, not a stale document
  • Each answer cites the control and its evidence
  • Dev-facing questions routed into the software report
  • Reuse across customers — answer the question once
  • Export for the customer's own template
vendor questionnaireauto-answer
Q07Do you enforce MFA on admin access?A.5.17
Q12Are backups tested for restore?A.8.13
Q19Do you run annual penetration tests?A.8.8
Q24Is a DPA in place with sub-processors?A.5.20
Q31How are security incidents reported?A.5.24

The honest version of a trust page. A Trust Center that only ever shows green is worth nothing, and buyers know it. Yours reflects real state — including work in progress — which is exactly why the green parts are believable.

Send a link instead of
a three-day spreadsheet