Rethinking Security UX
Trust
centers
Trust centers are how organizations demonstrate their security posture to prospects and clients during procurement. In practice, this means responding to security questionnaires — detailed reviews that assess an organization's compliance, controls, and risk management. A client sent a 20-question security review one year. The next year, the same client sent a 200-question review. That's a 10x increase in compliance work, and with the variety of applications and technology stacks involved, AI has not been effective at generating accurate responses.
When Andrew evaluated trust center products from GRC (Governance, Risk, and Compliance) vendors — platforms designed to centralize security documentation, risk assessments, and audit workflows — the quotes came back extremely high and the implementations didn't reflect how organizations actually handle these processes. The tools were built for compliance teams, not for the sales teams who are on the front line of the procurement process.
So he started building differently. His approach embeds trust centers into the sales process the way CLM (Contract Lifecycle Management) software does — giving sales teams the ability to operate independently while still being informed of where the compliance and security functions stand for their prospects during due diligence. Sales doesn't need to wait on security to know the status of a review. Security doesn't need to chase sales for context.
There are currently separate themes for Privacy and Security, with Legal coming next. Once the theming is finalized, the application will be built out with full CLM functionality — tracking contracts, reviews, and compliance artifacts through their entire lifecycle from initial prospect inquiry to signed agreement.
