Managing content in your Trust Center

What is Trust Center Content?

Content in your Trust Center includes any compliance-related materials you want to share with clients:

• Compliance certifications (SOC 2, ISO 27001, etc.)
• Security policies and procedures
• Audit reports
• Privacy documentation
• Data processing agreements
• Software Bill of Materials (SBOM)
• External links to additional resources

Once uploaded, this content can be displayed on your Trust Portal, to your clients in the Ceeyu platform, and referenced in questionnaire responses.

Content has some properties to help you organize your compliance-related materials:

• Access Level: Who can access this content? See 'Access Levels: Controlling Who Sees What'
• Category: Help your customers quickly find what they need. See 'Organizing Content with Categories'
• Expiry Date: Is this content still relevant?

Adding Content

Currently, two types of content are supported, documents and (external) links.

Upload a Document

1. Navigate to Trust Center > Content in the main menu
2. Click Add document
3. Drag the document on the drop zone, or click on the dropzone to select a file using your system file selector
   (Supported file types are .pdf, .docx, .doc, .txt, .pptx, .ppt, .xlsx, .xls, .csv)
4. Choose Create

The file will be uploaded, checked for viruses, and provided with the following default values:

• Name: The uploaded file's name
• Access Level: Private
• Category: Other
• Expiry date: Empty

Note: You can modify these properties by clicking on the triple dot menu on the right hand side of the file, and selecting Edit.

Add an External Link

If your documentation is hosted elsewhere, you can link to it:

1. Navigate to Trust Center > Content in the main menu
2. Click Add link
3. Provide a name for the document you're linking to
4. Select a category for the link
5. Provide the URL of the document you're linking to
6. (Optional) provide an expiry date
7. Click Create

Note: External links always have Access Level Public and are displayed on the Trust Portal with an icon indicating they lead to an external resource.

Organizing Content with Categories

Categories help organize your content so clients can quickly find what they need. The categories are displayed as filters on your Trust Portal.

Your Trust Center includes default categories, but you can manage your own categories if desired. To manage your own categories, navigate to Trust Center > Settings > Categories

Access Levels: Controlling Who Sees What

Every piece of content has an access level that determines who can view it. Choose the appropriate level based on the sensitivity of your information.

PUBLIC

Who can access: Anyone with your Trust Portal link

When to use:

• General company information
• Public certifications (ISO 27001 certificates)
• Security overview documents
• Privacy policies
• Public-facing policies

Example: Your ISO 27001 certificate that you're proud to display to prospects and customers alike.

CLIENT

Who can access: Companies connected to you as clients in the Ceeyu platform, and anyone who requests access and receives your approval

When to use:

• Client-specific documentation
• Detailed security policies
• Architecture diagrams
• Information meant for established business relationships

Example: Your detailed information security policy that you share with clients but not with the general public.

ON REQUEST

Who can access: Anyone who requests access and receives your approval

When to use:

• Sensitive audit reports (SOC 2 Type II)
• Penetration test results
• Detailed compliance documentation
• Information requiring NDA or business justification

Example: Your SOC 2 Type II report that you share with serious prospects after they've requested access and you've verified their identity.

How it works:

1. Visitors see the document listed but cannot view or download it
2. They click Request Access and fill out a form
3. You receive a notification
4. You review and approve/deny the request
5. If approved, they receive an email with a secure access link

PRIVATE

Who can access: Only you and your team members in Ceeyu

When to use:

• Internal-only documentation
• Draft documents not yet ready for sharing
• Notes and reference materials
• Documents used for AI-powered questionnaire assistance

Example: Internal compliance tracking spreadsheets or draft policies under review.

Note: PRIVATE content is never visible on your Trust Portal and won't appear in search results.

Changing Access Levels

You can change a document's access level at any time:

1. Go to your Trust Center content list
2. Click on the document you want to modify
3. Select a new Access Level from the dropdown
4. Click Save Changes

Important: If you change a document from PUBLIC or SUPPLIER to ON REQUEST or PRIVATE, users who previously had access may lose it immediately.

Best Practices

Start with the Right Access Level

Think carefully about access levels when uploading:

• Default to more restrictive and open up later if needed
• Consider regulatory requirements (e.g., GDPR, HIPAA)
• Evaluate competitive sensitivity

Organize from Your Client's Perspective

Ask yourself: "If I were evaluating my company, how would I want to find this information?"

• Use clear, descriptive titles
• Write descriptions that explain the value, not just repeat the title
• Group related documents in the same category

Keep Content Current

Set expiry dates if relevant and set reminders to update:

• Certifications when they're renewed
• Policies when they're revised
• Reports when new versions are available

Outdated compliance documentation can raise more questions than it answers.

Use Consistent Naming

Develop a naming convention for documents:

• ✅ SOC 2 Type II Report - 2024
• ✅ Information Security Policy v3.2
• ❌ final_FINAL_SOC2_report_v2.pdf