Trust Portal

Trust Portal User Guide

How to configure and use the Trust Portal

Overview

The Trustero Trust Portal enables organizations to securely share compliance content, like attestations or certifications with 3rd parties. This helps organizations avoid tedious work of managing confidentiality agreements and distributing files.

How It Works

Permissions

Documents shared in the portal have one of the following permission levels:

  1. Public: can be downloaded by anyone who visits the page
  2. Confidential: can be downloaded only after accepting the confidentiality agreement. This is self-service and requires no additional approval. 
  3. Restricted: can be downloaded after accepting the confidentiality agreement and after the publisher approves the access request.

Users

Each Trust Portal has two types of users:

  1. Visitors (external): the third-parties who are looking for compliance information about the publisher, see the trust portal from a public page. There they can:
    • See information about the publisher's compliance status
    • See documents shared by publisher
    • Request access to confidential and restricted documents
  2. The Publisher (internal): the organization that is sharing compliance information with third parties, has a portion within the Trustero app where they manage their trust portal. There, users with Admin access can:
    • Determine which documents to publish
    • Determine permission levels of the documents
    • Approve/deny requests to access documents
    • Manage permissions to documents
    • Manage branding elements
    • Set the confidentiality agreement

Settings & Configurations

Getting Started

  1. Select documents to publish
  2. Publishers (Admins) go to the app; navigate to Compliance --> Trust Portal
  3. Upload documents & assign permission levels
  4. Configure branding (see image details below)
  5. Once all required elements are in place, activate portal to share with 3rd parties

    See additional details on images and custom domains below.

Image Details

The portal can be customized with a logo and header image.

Logo

The logo is at the top of your portal.

Constraint

Value

Max file size

100 KB

Max dimensions

600px (width or height)

Min dimensions

100px (width or height)

Aspect ratio

Any (non-square logos allowed)

Formats

JPG (photos) or PNG (graphics, logos)

 

Header

You can provide a custom header image for your page. Here's how it's used:

  • Placement: The image is used as a background at the top of the portal.

  • Positioning: The image is centered both horizontally and vertically.

  • Scaling: The image is automatically scaled to cover the entire header area. This means:

    • The image will fill the space without distortion.

    • Some parts of the image may be cropped to maintain its aspect ratio.

  • Recommended Size: For best results, provide a landscape-oriented image (e.g., 1600x600 pixels or similar).

  • File Format: JPEG or PNG works best.

Property

Recommended Value

Max file size

≤ 400 KB

Preferred width

1000–1600 px

Preferred height

300–500 px

Min width

800 px

Min height

200 px

Aspect ratio

~2:1 to 3:1 (landscape)

Formats

JPG (photos) or PNG (graphics, logos)

 

Custom Browser Tab & Favicon

The title and favicon of a browser tab can be customized to align with your branding. Here are the specs: 

  • Title
    Displays as the title in the browser tab
    • Must be fewer than 256 characters
  • Favicon
    Appears next to the title in the browser tab 
    • Maximum size: 256x256 pixels
    • Supported file types: .png.jpg.ico

Using a Custom Domain

You may want to configure a custom domain for your trust portal, (e.g., trust.acme.com). The following instructions explain how to configure this with help from Trustero. 

  1. Create a Subdomain
    Set up a subdomain with your DNS provider (e.g., trust.acme.com).
  2. Submit Your Custom Domain to Trustero
    Provide Trustero with the subdomain you’ve created, so it can be configured for use with your Trust Portal. Trustero will respond with CNAME records you need for the next step in one business day.
  3. Receive CNAME Records from Trustero Trustero will provide two CNAME records that need to be added to your DNS:
    1. TLS Validation CNAME
      This record allows a publicly trusted Certificate Authority (CA) to verify domain ownership using DNS-based validation. Once validated, a TLS certificate is issued, enabling secure HTTPS access to your custom domain.

      Sample from Cloudflare: 
    2. Portal CNAME
      This record directs your subdomain traffic to the Trust Portal. Once active, visitors accessing your custom domain will be served your Trust Portal over HTTPS.

      Sample from Cloudflare:
  4. Update Your DNS Settings
    Log in to your DNS provider and add both CNAME records exactly as provided by. Trustero. Be sure to save your changes.
  5. Notify Trustero
    After the records have been added, inform Trustero so the setup process can proceed.
  6. Wait for Activation
    Trustero will complete the domain configuration and notify you once your custom domain is live and serving your Trust Portal securely. Trustero will complete this within one business day of being notified.