Evidence and policies
Keep documents current with owners, versions and expiry reminders, and generate security policies from your company profile.
Updated
The evidence vault
Every document has a type, an owner, a confidentiality level and, optionally, an expiry date.
- Versions: upload a new version instead of a new document; the history is kept.
- Scanning: every file is scanned for viruses before it can be downloaded. Accepted formats are PDF, Word, PNG, JPEG and WebP.
- Controls: link each document to the controls it proves. Drafted answers cite these documents.
- Reminders: owners are reminded before a document expires.
Confidentiality levels
| Level | Who can see it |
|---|---|
| Public | Anyone, on your trust page |
| Under NDA | Visitors whose access request was approved |
| Internal | Only your organization |
Generating policies
Under Policies, choose the policies to generate, the approver and the effective date. TrustDesk writes each policy from your company profile and files it in the vault as Word and PDF. The seven security policies are information security, access control, incident response, backup and recovery, supplier security, acceptable use, and vulnerability management.