Trust Center
Answer the questionnaire once, with live posture.
The Trust Center is a module of UASR. Publish what you are willing to show of your own posture, ask a supplier for theirs, and stop trading a spreadsheet once a year.
Two directions, the same facts
The same data, read from either side. Nothing leaves your tenant without your say-so.
Share yours
Publish an identity card: legal details, how many devices, how many domains, your Cyber Score. Which controls you enforce is visible to the partners you choose, and to nobody else.
Read theirs
Find a supplier through the business register — SIREN in France, its equivalent elsewhere — ask for access, wait for both sides to agree, then read their inventory and their open tasks.
What is inside
Six things the Trust Center does, all of them on data your customer already has in UASR.
Business-register lookup
Find a partner by their registration number: SIREN in France, and the equivalent register in other countries.
Dual consent
Both organisations have to agree before anything is visible. Nothing is shared by accident.
Shared inventory
Device posture, Microsoft 365 and Google Workspace posture, exposed assets and web-access policies, in one view.
The Cyber Score, shared
A partner sees the same score out of 100 you see yourself, and how it has moved.
Which controls are on
Show that a control is enforced without showing how it is configured.
The identity card
Legal details, device count, domain count and the score: one page a procurement team can read.
What people use it for
Three moments where the questionnaire is the slowest part of the job.
Procurement and due diligence
Read a supplier's posture in minutes, instead of waiting weeks for a spreadsheet to come back.
Third-party risk
Watch a supplier's posture all year, not only when they are onboarded. You see it when their score moves.
Supply chain under NIS2
Supports your NIS2 supply-chain duties with evidence you can show an auditor, rather than a declaration.
The questions we are asked
Three of them come up every time.
- Who sees what?
- Only the organisations that have completed dual consent, and only what each side has chosen to share. Either side can stop sharing.
- Does it replace security questionnaires?
- For routine checks, largely. You can still attach evidence for a deeper review, but the routine part becomes continuous instead of annual.
- Does it work outside France?
- Yes. The lookup covers the French SIREN register and its equivalents elsewhere, and the evidence maps to NIS2, DORA, ISO/IEC 27001, the ANSSI and LPM requirements, and GDPR and the CRA.
Ask us for a quote: tell us how many tenants you look after and we come back with a proposal.
