Trust Centre

Everything Procurement Asks for, on One Page

Policies, agreements, sub-processors, insurances and the technical detail, all in one place, so a vendor review can be done from one bookmark instead of an email thread.

Where your data lives

Your Region, and We Say Where the Backups Go

At the SiteGround Tier-1 data centre closest to your country. Regions include Sydney, Singapore, Iowa, London and Frankfurt, and residency can be locked to a single region under your contract. The nightly encrypted backup is held in Australia, and we name that rather than leave you to ask, because it is the question most vendors cannot answer.

Security & data residency →

Policies & agreements

The Documents Themselves

Privacy Policy

What we collect, why, how long we keep it, and what you can ask us to do with it.

Sub-processors

Every third party that can touch data, what each can see, and in which region. Versioned, and cited as Schedule A to the DPA.

Vault End User Agreement

The terms an individual respondent agrees to.

Bank End User Agreement

The terms an administrator agrees to.

Technical FAQ

Architecture, controls, retention and the answers to most security questionnaires.

Insurances & tax

Certificates of Currency

Current certificates, available directly, with no request needed.

WorkCover · Professional Indemnity · Public Liability · Cyber Liability · W-8BEN-E

Ask, and We Will Answer Against Your Framework

If your review uses a specific control framework, such as ISO 27001, SOC 2, Essential Eight, IRAP, NIST CSF or GDPR, tell us which and we will respond in the format you use rather than sending a generic pack back.