White-Label Trust Center onyour own domain
Show customers and partners how mature your compliance is. It runs on your own domain and in your brand. An NDA workflow and a live status page are built in. You run it all yourself and stay in full control.
What you get
- Custom domain / branding
- Certificate showcase
- Live status pages
- NDA-gated downloads
- DSAR form
- Subprocessor list
Features at a glance
All you need for a trust center that looks good, meets the rules and runs on your own servers.
Custom domain
Run your trust center on an address such as trust.yourcompany.com. You use your own TLS certificate for the secure connection.
Certificate gallery
Show your certificates, such as ISO 27001, SOC 2, BSI C5 or TISAX. Each one shows its date, expiry, certification body and number.
Status pages
See the live status of each part of your service, with past incidents, planned maintenance and uptime. People who sign up get news by email.
NDA-gated downloads
Visitors sign a non-disclosure agreement (NDA) online first. Only then do they get files you need to guard, such as SOC 2 Type II reports.
GDPR request forms
Forms for GDPR requests, such as when people ask what data you hold on them (DSAR). A built-in workflow guides your team.
Branding & Layout
Adjust logos, colours, fonts, images and content yourself. No coding needed.
Your benefits
A trust center helps you close deals sooner. Your team spends less time on security questionnaires. And customers and partners can see how mature you are, day and night.
- Faster deals, since customers look things up themselves
- A professional look in your own design
- Access only after an NDA, with an audit trail
- GDPR requests handled in an orderly, traceable way
- Self-hosted, so you stay in charge of your data
Use cases
Faster sales cycles
Send leads a link to your trust center. They check your proof themselves and decide sooner.
NDA-protected audit reports
Share SOC 2 and pentest reports only after an NDA. An admin approves access, and Core logs each download.
Service status
Keep customers informed about incidents live, in your own design. People who sign up get news by email.
GDPR requests
People send access and deletion requests and manage consent right in the portal, in your brand.
How the White-Label Trust Center works in practice
Each tenant in SecTepe.Core gets its own public trust center. Visitors need no login. They see only what you have marked as published.
What visitors see
- Certifications: the frameworks you marked as certified in Core. Each shows its date, expiry, certification body and number.
- Documents, grouped by category. Visitors can ask for access to the ones you keep private.
- Your ten latest updates, such as security, policy or subprocessor news.
- A list of subprocessors with location, country and the data each one handles.
- Security controls by category, each with its status.
- A badge as an image that you can embed on your own website.
How content gets published
Documents follow a two-person rule. One person submits a document. A different person must approve it before it goes live. You pull controls from the ISMS module and subprocessors from the supplier register. That way you keep this data in one place. Each update gets a category: general, subprocessor, policy, security, compliance or other. Only published updates appear on the page.
Sharing sensitive files
Visitors can ask for access to single documents or single controls. Core then notifies your team by email. An admin approves or rejects the request. On approval, Core can create a link to the chosen documents. A link can have an end date and a limit on how often it opens. You can revoke it at any time. Core logs each access.
By default, shared PDFs carry a watermark with details of the recipient. If you link your CRM, such as Odoo or HubSpot, Core checks whether a contact has a valid NDA.
It also works the other way. With an upload request, a supplier sends you files through a link. Core checks each file for threats and blocks files that fail.
Domain and operation
The trust center runs on a subdomain or on your own domain, such as trust.yourcompany.com. You point your DNS record to your Core instance and add a TLS certificate. The page shows your company name and logo. You host Core yourself, in containers or on Kubernetes. Files sit in the file storage, kept apart per tenant.
Ready for your own white-label trust center?
Book a personal demo. See how you can launch a trust center in your brand in just a few days.
How we work with you
We want to work with you for the long run, not just deliver once. Our way of working has four steps. So you always know what comes next, who does what and what you get.
1. Free initial conversation
We learn where you stand and what you want. In 30 to 45 minutes we check if we are a good fit. We show you options and answer your questions. There is no obligation.
2. Current state review
We check where you stand today: tech, processes and rules. You get a list of strengths and gaps, sorted by urgency. Our offer is based on it.
3. Delivery with a dedicated lead
An experienced lead guides you through the project. You get clear goals, an open plan for time and cost, and a status every week. All results are written down and belong to you.
4. Running and reviewing
After the project we stay with you. We run systems for you, check them at set times and keep track of open tasks. When new threats or new rules come up, we get in touch.
Common questions
We hear these questions most often in a first call. For anything else, write to hello@sectepe.de or give us a call.
- How do we start working with SecTepe?
- Every project starts with a free first call. Then you get an offer with scope, timeline and result. If you like, we start small with a pilot. That way you get to know us before the real work starts.
- What company sizes and sectors do you support?
- We work for small and mid-sized firms, for parts of large groups and for operators of critical infrastructure (KRITIS). Often that means industry, trades, health, banks, energy and public bodies. Our focus is mid-sized firms in Germany, Austria and Switzerland.
- Do you work on site, remotely or hybrid?
- Both. Reviews, advice and most services run remotely from German data centers. For workshops, training and emergencies we come to you, mainly in North Rhine-Westphalia, the Rhineland and the Ruhr area. We travel further when needed.
- Which standards and regulations do you cover?
- We work to ISO 27001:2022, BSI IT-Grundschutz, TISAX, B3S KRITIS, NIS2 and DORA, plus sector-specific rules. Our methods build on known frameworks such as NIST CSF, MITRE ATT&CK, OWASP and OSSTMM. We combine them to fit each project.
- How do you protect the confidentiality of my data?
- By contract and by technology. Before every project, both sides sign a non-disclosure agreement. Your data stays in German data centers. Every access needs a second login factor and is checked one by one. Our whole team is bound to secrecy by contract and under the GDPR.