What SOC 2 provider does Sustalium use?

SafeBase

SafeBase appears in Sustalium's public security materials.

ing. What Is a Trust Center?¶ A Trust Center is a public, living page that centralises an organisation's security and compliance posture. For SaaS companies, platforms like Vanta, SafeBase, and Drata normalised the concept: instead of receiving a SOC 2 report over email, a prospect enters their email once to view the report behind a lightweight NDA, then monitors it for real-time updates — indefinitely. The format works because it solves three

Drata

Drata appears in Sustalium's public security materials.

Trust Center?¶ A Trust Center is a public, living page that centralises an organisation's security and compliance posture. For SaaS companies, platforms like Vanta, SafeBase, and Drata normalised the concept: instead of receiving a SOC 2 report over email, a prospect enters their email once to view the report behind a lightweight NDA, then monitors it for real-time updates — indefinitely. The format works because it solves three universal p

Vanta

Vanta appears in Sustalium's public security materials.

dy ticking. What Is a Trust Center?¶ A Trust Center is a public, living page that centralises an organisation's security and compliance posture. For SaaS companies, platforms like Vanta, SafeBase, and Drata normalised the concept: instead of receiving a SOC 2 report over email, a prospect enters their email once to view the report behind a lightweight NDA, then monitors it for real-time updates — indefinitely. The format works because it sol

al Environmental Impact Environmental Management European Union Export FSC FSMA 204 Fashion Finance Food & Beverage Food Business Food Safety Forestry French Regulations Furniture GDPR GPSR German Supply Chain Act Governance & Trade Guides Hospitality How-To Guide Human Rights ISO 14001 Industry Guides Industry Trends Information Security Manufacturing Market Access Marketing Medical Devices Modern Slavery NGO NIS2 OEKO-TEX Packaging Platfo

t Center. Before an enterprise buyer signs a six-figure contract, they open Stripe's Trust Center, Notion's Trust Center, or Vercel's Trust Center and verify SOC 2, ISO 27001, and HIPAA certifications right on a public page. No emails, no PDF attachments, no "we'll send that over." The compliance proof lives at a URL, updated continuously, and available 24 hours a day. But that same buyer also specifies physical hardware, orders safety equip

oday has a Trust Center. Before an enterprise buyer signs a six-figure contract, they open Stripe's Trust Center, Notion's Trust Center, or Vercel's Trust Center and verify SOC 2, ISO 27001, and HIPAA certifications right on a public page. No emails, no PDF attachments, no "we'll send that over." The compliance proof lives at a URL, updated continuously, and available 24 hours a day. But that same buyer also specifies physical hardware, orders s

Devices Modern Slavery NGO NIS2 OEKO-TEX Packaging Platform Comparison Pricing Procurement Product Compliance Product Safety Prop 65 REACH Retail Risk Management RoHS SME Insights SOC 2 SaaS Social Compliance Social Responsibility Strategy Supplier Onboarding Supply Chain Sustainability Sustainability Software TSCA Textiles Toys Traceability & Safety Transparency Trust Center Tutorials UK Regulations US Regulations USA Regulations Web Standa