Trust Center
Security questionnaires keep coming. Answer them from what you already know.
Security questionnaire software with a trust page. Trust Center in Acuna GRC helps you answer the long lists of security questions customers send, using only facts you have approved, and shows your security proof on one web page. Aiko drafts, your team approves, and Swiss experts can help you build the library.
Exposure Library
Documents · Sample company Brenvara AGImport questionnaire
Kestrel Bank AG · security-questionnaire.xlsxKestrel Bank AG
Security questionnaire · 142 questionsThe problem
Why do security questionnaires take so much time? Same questions, new spreadsheet.
Every prospect sends its own file with questions you have answered before, so someone copies old answers by hand and hopes they still hold. Meanwhile your certificate and policies go out by email to whoever asks.
Every prospect sends a different spreadsheet with the same questions.
Fix: import their file, draft from your approved facts, and export the answers into their own cells.
Sales answers things security never approved.
Fix: drafts come only from what is in your Exposure Library, and a claim about a control that is not implemented gets a warning.
We email our certificate and policies to anyone who asks.
Fix: a trust page with a gated tier: Request access, NDA signature, and every view and download logged.
How Trust Center works
How does security questionnaire software work in Acuna GRC? Disclose, import, draft, share.
You choose what you disclose, import the questionnaire, draft, review and approve the answers, then export them into the prospect's file or point the prospect to your trust page.
How do you control what you disclose to customers?
With one disclosure decision. The Exposure Library has six tabs: documents, controls, measures, frameworks, KPIs and third parties. Only what is in it can be cited in an answer or shown on your page, and each item is Not public, Gated or Public. On a first run, a starter proposal ticks your published documents, implemented controls and frameworks, and writes nothing until you confirm.
Controls and their health in Implement →Can you answer a security questionnaire in the prospect's own spreadsheet?
Yes. Import Excel, CSV, Word or PDF: the wizard guesses the question, reference, section and answer columns, and a CAIQ v4 workbook is recognised from its column titles. Choose Draft, work through the Needs review filter and approve. Approved answers are written into a copy of the original spreadsheet, and every export is kept under Exports.
An answer that claims compliance while the cited control is not implemented, or the cited document is still a draft, gets a warning.
Sending questionnaires to your suppliers? That is TPRM →How do you reuse security answers for the next questionnaire?
Save an approved answer to the Answers Library. It keeps the questionnaire's tags, or you clear them to make it global. Each entry has a review date: an entry past it is still offered, with what the platform currently knows shown beside it, so a reviewer decides whether it still holds.
Documents under approval in Operate →Can prospects get your security documents without emailing you?
Yes. Your trust page has an open tier anyone can read and a gated tier. A visitor clicks Request access, your team approves it in Assure, and the visitor signs your NDA before the gated documents open. Each signature gives you a signed copy, and every view and download is logged.
See Acuna GRC's own Trust Center →faster answers to customer security questionsMeasured across Acuna GRC customers.
Aiko in Trust Center
What does the AI do when you answer a security questionnaire? Aiko phrases. You approve.
Once the platform has resolved the facts that apply, Aiko phrases each answer from those facts alone and shows what it was built from. Answers with a confidence below 50 land in Needs review, and where the library holds nothing, the answer is a Gap: nothing is invented.
Swiss experts
Can someone help us build our security answers library? Yes, with our Swiss experts.
Done with you: in Program setup in Acuna GRC, our Swiss experts help fill the Exposure Library and review your first answer sets. Your team approves every answer.
.png&w=3840&q=75&dpl=dpl_Ba6pf7ueYcNioUvDkWkKkJsULeG7)
Cybersecurity governance expert
Jean-Emmanuel Rodriguez
Vendor risk and compliance technology
GRC Consulting team leader
Bénédicte Sévin
Program setup
Do it yourself
You run the program in Acuna GRC, with Aiko.
Done with youOn Trust Center
Guidance, reviews and audit preparation with your team.
Done for you
Our experts run it. You review.
Integrations
Does Acuna GRC connect to the tools you already use? Yes, 100+ connectors.
Connectors pull security data from your identity, endpoint and cloud tools, and the KPIs you expose in Trust Center can be fed by them.
Entra ID
Okta
Defender
Intune
AWS
Azure
GitHub
KnowBe4- 100+ connectors in all
Missing a connector? We build it. See Integrations and API
Connects with
How does Trust Center fit with the rest of Acuna GRC? It discloses what you already manage.
The documents, controls, measures, frameworks and KPIs you expose are the ones you already keep in Acuna GRC: a public control shows its implementation status, a public document its version and publication date. Subprocessors come from your TPRM third parties.
- ImplementExposed controls show their status
- OperatePublished documents feed answers
- AssureLives in the Assure sidebar
- ComplyYour frameworks on the page
- TPRM (Supplier Shield)Subprocessors come from your suppliers
- AikoPhrases answers from approved facts
- Administration and securityAdmins switch the page on
FAQ
What else do people ask about security questionnaire software?
Which questionnaire formats can we import?
Excel, CSV, Word and PDF. A multi-tab workbook imports as one questionnaire, and a CAIQ v4 workbook is recognised from its column titles. In Word and PDF files, questions are detected from tables and numbered lists, with a correction step, and the response comes back as a PDF grouped by section.
Does Trust Center work with AI switched off?
Yes, everything except drafting. Drafting needs AI enabled for your organization and counts against its monthly AI budget. The libraries, import, review, export and the trust page work without it.
Can search engines index our trust page?
An administrator chooses. Under Admin → Trust Center they switch the page on and set its headline, an optional confidentiality notice, how long access lasts, the contact card and whether search engines may index it.
Does a visitor ever see internal notes or Aiko's reasoning?
No. Not public items, internal notes on exposed items and the passages indexed from your documents are never shown, and Aiko's confidence and reasoning stay inside the platform. Revoking access also kills any download link already sent.
What happens to the trust page if we switch the module off?
The page goes offline.
Do we still need our security team?
Yes. Approving an answer is their review: a draft is never an approved answer until someone on your team approves it.
How do we get Trust Center, and where is our data hosted?
It is an add-on that Acuna switches on for your organization, and the Trust Center access level on each person's profile decides who reads and who writes. Your data is hosted in Switzerland, the EU or the US.
Start with one step.
Bring one questionnaire a prospect sent you. We'll import it with you, draft from a sample library and show you the answers exported into their own file.
Hosted in Switzerland, the EU or the US