The trust center you send to a security reviewer.
Notice Labs is trust center software for software companies. It publishes your security controls, documents, subprocessors, vulnerability disclosure and privacy requests on one page at your own domain: the link you send when a customer's security team asks how you protect their data.
A trust center is a public page where a company shows how it protects customer data, so a reviewer can read it instead of waiting for answers by email. What a trust center is.
From £39 a month. Set up in an afternoon, without a sales call.
A Notice Labs trust center, exactly as a reviewer sees it.
What a reviewer sees
The page has a fixed structure. A reviewer knows where everything is before they open it, and there is nothing for you to design.
Security controls, grouped the way a questionnaire asks
Controls come from the Notice Labs library, with wording that reviewers recognise and categories that follow the questions they ask. You choose the ones you run and add the detail that is true for you: the provider, the cadence, the date.
The section says exactly what you state you run, in words a reviewer already knows, and implies nothing beyond it.
Documents that are public, and documents that need a request
Policies and the DPA can be downloaded by anyone. Reports such as a penetration test summary or a SOC 2 report can sit behind a request. A reviewer asks for everything they need in one form, you approve it in the admin, and they receive a link that expires.
Nothing is emailed around as an attachment, and you know who asked for what and whom you approved. You can revoke a link at any time. Enterprise adds NDA acceptance, passwords, email-domain rules and analytics.
Customers hear about changes
Anyone can choose Notify me on your trust center and confirm their email. When you change a document, a control, a compliance status or a subprocessor, they're sent one short update a day. You choose which kinds of change are included, and every email has an unsubscribe link.
Every vendor that touches customer data
Subprocessors are listed with what they do and where they process data. Logos resolve automatically. Point your DPA at the page, so the list you are bound by is the one reviewers read.
Two intakes that keep security and privacy mail out of support
A researcher who finds a problem gets a form with the fields you need to triage it. A person who wants their data deleted, corrected or exported gets one too. Both arrive as records you own, with the requester's details attached.
What you maintain
The admin is a set of lists. Add controls from the library, upload a document and choose who can see it, list a vendor. There is no editor and no layout to look after.
Access requests, vulnerability reports and privacy requests arrive as rows with the requester's details, so nothing depends on someone noticing an email.
Document access requests, with approve and deny.
Privacy requests, kept as a record.
One trust center, for whatever the review asks
Each part of a Notice Labs trust center has its own page, and so does each kind of review it answers.
Built for
Not a compliance platform
Vanta, Drata and Secureframe run your compliance programme. They connect to your cloud, monitor your laptops and prepare you for an audit. Their trust page is a by-product of that work.
Notice Labs only does the public page. That is why it costs a fraction of the price, takes an afternoon to set up, and is useful whether or not you have a compliance programme yet. If you have one, keep it and link the results here.
| Compliance platform | Notice Labs | |
|---|---|---|
| What it does | Runs your internal compliance programme | Publishes your public security posture |
| Connects to | Your cloud, identity provider and laptops | Nothing. You enter what is true. |
| Time to a page | Weeks, after onboarding | An afternoon |
| Price | On request | Published below |
Pricing
Both plans include every section of the trust center. There is no free plan.
Pro
For software companies running customer security reviews.
£39a month
or £425 a year, save £43
One trust center
- One trust center on your own domain
- Security controls from the Notice Labs library
- Public and request-to-access documents
- Subprocessor directory
- Vulnerability disclosure intake
- Privacy request intake (deletion, export, access)
- Compliance status
Enterprise
For groups and companies with more than one product, brand or team.
£349a month
or £4,000 a year, save £188
Unlimited trust centers
- Everything in Pro
- Unlimited trust centers and extra seats
- NDA gates and password-protected documents
- Email-domain access gates, with expiring and revocable access
- Trust center analytics: views, downloads and requests
- AI triage for vulnerability reports
- Option to turn off Notice Labs attribution
- Dedicated onboarding and priority support
- Procurement support, custom terms and annual invoicing
Questions first? Talk to us
Prices exclude tax, which is added at checkout. Change or cancel from your account.Full pricing and questions
Common questions
What is a trust center?
A public page where a company shows how it protects customer data: its security controls, compliance status, policies and reports, subprocessors, and how to report a vulnerability or make a privacy request. It is the link a company sends when a customer's security team starts a review, instead of answering the same questions by email.
Do we need SOC 2 or ISO 27001 before using this?
No. Publish the controls you have today and add certifications when they are complete. The page is designed to be useful before an audit as well as after one.
How much does trust center software cost?
Notice Labs Pro is £39 a month, or £425 a year, for one trust center with every core feature. Enterprise is £349 a month. Both prices are published and self-serve. Trust centers bundled with compliance platforms are usually quoted as part of the wider platform.
Can customers be told when something changes?
Yes. Visitors choose Notify me, confirm their email, and get one update a day when a document, control, compliance status or subprocessor changes. You choose which kinds of change are included, and every email has an unsubscribe link.
Can it write our DPA or a security overview?
Create makes a DPA template (for your lawyer to review), a security overview PDF and a blank questionnaire to send to your own vendors, all from what is already on your trust center. It doesn't answer anyone else's questionnaire.
Does it integrate with our cloud or our compliance tool?
No. Notice Labs holds what you publish, not what you run. That keeps set-up to an afternoon and means there is nothing to maintain beyond keeping the page true.