Trust Center Builder

Trust Center Builder

Build a serverless trust center that publishes a company's compliance posture — certifications, policies, and audit reports — with gated access for sensitive documents.

What This Skill Produces

A fully deployed trust center with:

• Public page: Company overview, certification badges, compliance stats, downloadable public reports
• Gated access: Visitors request access to sensitive docs (SOC 2, policies) → approval flow → visitor downloads
• Admin dashboard: Approve/deny requests, manage documents, view audit log
• Authentication: Cognito-based admin login
• Infrastructure: Serverless AWS (S3, CloudFront, WAF, API Gateway, Lambda, DynamoDB, Cognito)
• NDA integration (optional): Pluggable e-signature workflow — user chooses their provider

Monthly cost: ~$5-15/mo for the trust center infrastructure (e-signature provider costs vary).

Workflow

Follow these steps in order. Each step builds on the previous one.

Step 1: Gather Company Information

Ask the user for the following. Be conversational — don't dump all questions at once. Ask 2-3 at a time, then move on.

Required:

• Company name
• What the company does (1-2 sentence description for the trust center landing page)
• Admin email address (for Cognito login)
• Which certifications they have (SOC 2 Type I/II, SOC 3, ISO 27001, HIPAA, PCI DSS, FedRAMP, etc.)

For each certification, ask:

• Status: active, in progress, or planned
• Audit period (e.g., "Jan 2025 – Dec 2025")
• Auditor name (e.g., "Deloitte", "KPMG")

Ask about documents:

• Do they have a SOC 2 report to upload? SOC 3?
• Which policies do they want to publish? (Information Security, Access Control, BCDR, etc.)