Maintaining your Trust Center

Once your Trust Center is up and running - keeping it operational is fairly simple.

But we do recommend the following best practices as part of ongoing security health.

User and Access Management
Review and Update Team Roles: Periodically audit team roles and permissions to ensure appropriate access levels.

Monitor Customer Access Requests: Approve, deny, or revoke access based on business and security needs. Many customers prefer to add a "competitor" category that auto-rejects requests.

Manage SSO & SCIM Provisioning: Ensure authentication and automated user provisioning remain operational.

Go to Your Account (bottom left) --> Account Settings, to manage User & Access Management

Example of Trust Sharer permissions:

Integration Maintenance
Monitor Salesforce Data Sync: Ensure CRM automation for security reviews and visitor tracking remains effective.

Validate Slack Notifications: Review Slack periodically as a means to approving access requests that might not be auto-approved by Salesforce.

Go to Your Account (bottom left) --> Integrations, to manage third party tool access

Compliance & Security Reviews
Regular NDA and Policy Updates: Review NDA settings, redlining workflows, and customer agreements for compliance.

Audit Security Documentation: Keep SOC 2, ISO 27001, and other security certifications up to date.

Monitor Trust Center Engagement: Track visitor analytics and adjust content as needed based on content that is resonating with customers (or consider archiving content with low engagement to reduce maintenance)

Go to Audience --> click "Contacts", to audit access status, expiry, & NDAs

Go to Documents --> click "Activity & Versions", to see document-level interaction activity

Performance Monitoring & Optimization
Customer Trust Updates: leverage the Conveyor sub-processor and announcements feature to inform customers when there are changes to your trust posture.

Refine Trust Center Customization: Update customer facing branding, FAQs, curated Q&A pairs, and security documentation as business needs evolve.

Go to Knowledge Base --> click "Filter", and select "Needs Verification" to see what Q&A pairs are out of date. Recommend doing the same with documents on a scheduled cadence.