Trust resources for security, privacy and procurement review.
Review public policies, control descriptions and review materials for security, privacy and procurement.
TRUST CENTER AREAS
Security, privacy, compliance and vendor review in one place.
Start with the area your evaluator needs, then go straight to the documents below.
Security controls
Public control overview, mapped security control documentation and protected implementation detail for qualified review.
Review areaPublic documentation plus qualified legal/privacy review.Privacy and DPA
Privacy Policy, Public Data Processing Overview, retention context and the legal review path for DPA questions.
Review areaPublic disclosure plus qualified review.Subprocessors
Public provider disclosure plus protected provider-category and deployment-specific details for qualified review.
Review areaAvailable through qualified procurement review.Procurement support
Questionnaire support, RFP responses, security package routing, DPA context and deployment-specific follow-up.
Review areaPublic policy.Security disclosure
Responsible disclosure policy, permitted reporting path, safe-harbor expectations and prohibited testing boundaries.
Review areaTRUST DOCUMENTS
Public documents, control descriptions and review paths.
Documents are grouped by type: public policies, control descriptions and qualified-review materials.
Security and privacy review materials are available through qualified review.
Public legal/privacy documents
| Resource | Produced by | Availability | Access |
|---|---|---|---|
| Terms of ServicePublic terms for subscriptions, platform use, customer content and governance responsibilities. | Verbum | Public. | Open resource |
| Privacy PolicyPublic privacy policy describing how Verbum collects, uses and protects personal data. | Verbum | Public. | Open resource |
| Cookie PolicyPublic cookie and browser storage inventory with consent-control context. | Verbum | Public. | Open resource |
| Data Processing OverviewPublic overview. It does not replace the signed DPA. | Verbum | Public overview; DPA review request path through qualified legal review. | Open resource |
| SubprocessorsPublic subprocessor disclosure and qualified review path for protected provider details. | Verbum | Public page; additional provider details through qualified review. | Open resource |
Public security resources
| Resource | Produced by | Availability | Access |
|---|---|---|---|
| Security overviewPublic control overview. Evidence status and sensitive materials remain handled through qualified review. | Verbum | Public. | Open resource |
| Security DisclosurePublic responsible disclosure policy for vulnerability reports. | Verbum | Public. | Open resource |
Control documentation
| Resource | Produced by | Availability | Access |
|---|---|---|---|
| Security control documentationControl documentation can be shared with qualified reviewers without exposing sensitive implementation details publicly. | Verbum security/privacy review team | Qualified review; confidentiality process may apply. | Open resource |
| AI data handling controlsPublic AI data handling summary aligned with Security, Privacy, Terms and Data Processing Overview. | Verbum | Public summary; implementation details through qualified review. | Open resource |
Qualified-review materials
| Resource | Produced by | Availability | Access |
|---|---|---|---|
| Security and privacy review packageSecurity and privacy review materials available for qualified review. | Verbum security/privacy review team | Qualified review; NDA may apply. | Request review |
| Vendor questionnaire supportQuestionnaire support can be provided during qualified enterprise review. | Verbum security/privacy review team | Qualified review. | Request review |
| Protected evidence materialsAvailable to qualified customers during security review, subject to NDA or an appropriate confidentiality process. | Verbum security/privacy review team | Qualified review; NDA may apply. | Request review |
QUALIFIED REVIEW