How to configure and use the Trust Portal
Overview
The Trustero Trust Portal enables organizations to securely share compliance content, like attestations or certifications with 3rd parties. This helps organizations avoid tedious work of managing confidentiality agreements and distributing files.
How It Works
Permissions
Documents shared in the portal have one of the following permission levels:
- Public: can be downloaded by anyone who visits the page
- Confidential: can be downloaded only after accepting the confidentiality agreement. This is self-service and requires no additional approval.
- Restricted: can be downloaded after accepting the confidentiality agreement and after the publisher approves the access request.
Users
Each Trust Portal has two types of users:
- Visitors (external): the third-parties who are looking for compliance information about the publisher, see the trust portal from a public page. There they can:
- See information about the publisher's compliance status
- See documents shared by publisher
- Request access to confidential and restricted documents
- The Publisher (internal): the organization that is sharing compliance information with third parties, has a portion within the Trustero app where they manage their trust portal. There, users with Admin access can:
- Determine which documents to publish
- Determine permission levels of the documents
- Approve/deny requests to access documents
- Manage permissions to documents
- Manage branding elements
- Set the confidentiality agreement
Settings & Configurations
Getting Started
- Select documents to publish
- Publishers (Admins) go to the app; navigate to Compliance --> Trust Portal
- Upload documents & assign permission levels
- Configure branding (see image details below)
- Once all required elements are in place, activate portal to share with 3rd parties
See additional details on images and custom domains below.
Image Details
The portal can be customized with a logo and header image.
Logo
The logo is at the top of your portal.
|
Constraint |
Value |
|---|---|
|
Max file size |
|
|
Max dimensions |
|
|
Min dimensions |
|
|
Aspect ratio |
Any (non-square logos allowed) |
|
Formats |
JPG (photos) or PNG (graphics, logos) |
Header
You can provide a custom header image for your page. Here's how it's used:
-
Placement: The image is used as a background at the top of the portal.
-
Positioning: The image is centered both horizontally and vertically.
-
Scaling: The image is automatically scaled to cover the entire header area. This means:
-
The image will fill the space without distortion.
-
Some parts of the image may be cropped to maintain its aspect ratio.
-
-
Recommended Size: For best results, provide a landscape-oriented image (e.g., 1600x600 pixels or similar).
-
File Format: JPEG or PNG works best.
|
Property |
Recommended Value |
|---|---|
|
Max file size |
≤ 400 KB |
|
Preferred width |
1000–1600 px |
|
Preferred height |
300–500 px |
|
Min width |
800 px |
|
Min height |
200 px |
|
Aspect ratio |
~2:1 to 3:1 (landscape) |
|
Formats |
JPG (photos) or PNG (graphics, logos) |
Custom Browser Tab & Favicon
The title and favicon of a browser tab can be customized to align with your branding. Here are the specs:
- Title
Displays as the title in the browser tab- Must be fewer than 256 characters
- Favicon
Appears next to the title in the browser tab- Maximum size: 256x256 pixels
- Supported file types: .png, .jpg, .ico
Using a Custom Domain
You may want to configure a custom domain for your trust portal, (e.g., trust.acme.com). The following instructions explain how to configure this with help from Trustero.
- Create a Subdomain
Set up a subdomain with your DNS provider (e.g., trust.acme.com). - Submit Your Custom Domain to Trustero
Provide Trustero with the subdomain you’ve created, so it can be configured for use with your Trust Portal. Trustero will respond with CNAME records you need for the next step in one business day. - Receive CNAME Records from Trustero Trustero will provide two CNAME records that need to be added to your DNS:
- TLS Validation CNAME
This record allows a publicly trusted Certificate Authority (CA) to verify domain ownership using DNS-based validation. Once validated, a TLS certificate is issued, enabling secure HTTPS access to your custom domain.
Sample from Cloudflare:
- Portal CNAME
This record directs your subdomain traffic to the Trust Portal. Once active, visitors accessing your custom domain will be served your Trust Portal over HTTPS.
Sample from Cloudflare:
- TLS Validation CNAME
- Update Your DNS Settings
Log in to your DNS provider and add both CNAME records exactly as provided by. Trustero. Be sure to save your changes. - Notify Trustero
After the records have been added, inform Trustero so the setup process can proceed. - Wait for Activation
Trustero will complete the domain configuration and notify you once your custom domain is live and serving your Trust Portal securely. Trustero will complete this within one business day of being notified.