Everything behind a good security review
TrustDesk connects the pieces customers ask about: your security measures, the evidence behind them, the policies that describe them and the answers you have already approved.
Security questionnaires
Import the customer's file as it is. TrustDesk finds the questions on every sheet, table or list, drafts answers from your approved library, controls and evidence, and writes the approved answers back into the same cells.
- Excel, Word and CSV, including merged cells and several sheets
- Each draft shows its sources and a confidence level
- Uncertain answers are marked with the exact question to ask a colleague
- Assign, comment, approve and export into the original file
- Approved answers are saved to your library and reused next time
Trust page
Publish your security posture on a page customers can check before they send a questionnaire. Choose what is public, what needs an NDA and what stays internal.
- Security measures grouped by area, with status your team confirmed
- Public documents for download, confidential ones behind an NDA
- Access requests with email verification, approved automatically or by you
- Sub-processor list and security contact
- Your own subdomain or custom domain, and a log of who accessed what
Evidence vault
Keep the documents that prove your security measures in one place, with versions and reminders before anything expires.
- Versioned uploads with virus scanning
- Expiry dates and reminders to the document owner
- Linked to the controls each document proves
- Searchable text, used as context for drafted answers
Policy generator
Generate a first version of your security policies from the answers in your company profile, then review and approve them like any other document.
- Information security, access control, incident response, backup and recovery, supplier security, acceptable use, vulnerability management
- Incident response includes the NIS2 reporting timeline (24 hours, 72 hours, one month)
- AI acceptable use, AI procurement and human oversight documents with the AI Register
- Word and PDF, filed in the evidence vault
Security controls and readiness
A control library organized by the ten NIS2 risk-management areas and mapped to ISO/IEC 27001 Annex A. TrustDesk suggests which controls apply from your profile; your team confirms what is actually in place.
- Suggestions are never shown to customers as facts
- Readiness by area, weighted by what matters most
- Owners and notes per control
AI Register (add-on)
Find and record the AI tools your company uses, classify each one under the EU AI Act with plain-language questions, and see the duties and dates that follow.
- Discovery from expense exports and a short staff survey
- Dated classification records
- AI literacy training with acknowledgements
- Transparency notices in five languages and an evidence pack
For MSPs and consultants
Manage clients from one partner account: create client organizations from a template, see their readiness and open questionnaires, and send reminders in bulk.
- Templates with your service's controls, evidence and policies
- One dashboard for every client
- Your branding on client trust pages and emails
See it with your own questionnaire
The trial includes every Growth feature for 14 days.