What lives on your /trust/<slug> page, how to customize it, who can see it.
Every QorTrace org gets a Trust Center at qortrace.com/trust/<slug>.
It's a single URL you can hand to regulators, procurement,
investors, or any prospect asking "have you been audited?"
What's on it
- Org identity — name, logo, website link.
- Compliance signals — SOC 2 status, ISO 27001 status, any framework mappings (DORA, CNSA 2.0, EO 14144, NIST CSF 2.0).
- Audit history — every QorTrace audit you've completed, with click-through to the public verification certificate.
- Atlas summary — aggregate score, last-updated, # of wallets monitored (not the addresses themselves — those stay private).
- Methodology versions — the rubric used per audit, archived links.
- Subprocessor list (optional toggle).
- Security contact + bug-bounty link.
What's NOT on it
- Individual wallet addresses (always private).
- Source code (always private).
- Customer-specific findings (only the public summary).
- Anything you haven't opted to publish.
Customizing
Account → Trust Center →
- Logo upload (PNG / SVG up to 512 KB).
- Brand color (single hex).
- Visibility toggles per section.
- Custom domain (
trust.yourdomain.com) on Enterprise.
Who can see it
Anyone with the URL. The page is search-engine-indexed by default; toggle "noindex" if you only want it shareable, not discoverable.
Why it exists
Most enterprise sales motions hit "show us your audits". A Trust Center turns that 3-week back-and-forth into a single URL.