Build and deploy a production-ready Trust Center for any company. Use this skill whenever someone asks to create a trust center, compliance portal, security page, or wants to publish their SOC 2/SOC 3/ISO 27001/HIPAA/compliance posture publicly. Also triggers when someone mentions gated document access for audit reports, NDA-based document sharing, or wants to replace paid trust center tools like Secureframe, Vanta, Drata, or SafeBase. Even if they just say "I need a place to share my SOC 2 with customers" — that's a trust center. Use this skill.
Standardmäßig ist der Prompt ausgewählt, der zuerst die Quelle prüft. Sie können zu einem direkten Befehl wechseln oder eine lokale Kopie herunterladen.
Quelldateien prüfen
Lesen Sie SKILL.md und alle von SkillsMP angezeigten Begleitdateien, bevor Sie sich für eine Installation entscheiden.
Mit Codex oder Claude installieren Kopieren Sie diesen Prompt, fügen Sie ihn in Codex, Claude oder einen anderen Assistant ein und lassen Sie die Skill-Seite prüfen und installieren.
Ein direkter Befehl überspringt den Prüf-Prompt. Prüfen Sie die Quelle, bevor Sie ihn ausführen.
Build and deploy a production-ready Trust Center for any company. Use this skill whenever someone asks to create a trust center, compliance portal, security page, or wants to publish their SOC 2/SOC 3/ISO 27001/HIPAA/compliance posture publicly. Also triggers when someone mentions gated document access for audit reports, NDA-based document sharing, or wants to replace paid trust center tools like Secureframe, Vanta, Drata, or SafeBase. Even if they just say "I need a place to share my SOC 2 with customers" — that's a trust center. Use this skill.
Trust Center Builder
Build a serverless trust center that publishes a company's compliance posture —
certifications, policies, and audit reports — with gated access for sensitive documents.
What This Skill Produces
A fully deployed trust center with:
Public page: Company overview, certification badges, compliance stats, downloadable public reports
If the user wants automated NDA signing, guide them through connecting their chosen
e-signature provider. See the "NDA Integration" section below for details.
NDA Integration — Choose Your Provider
The trust center supports an optional NDA signing step before granting access to gated
documents. The backend is designed to be provider-agnostic — it uses environment
variables for the API key, URL, and template ID, and a webhook endpoint for completion
callbacks.
The user must choose an e-signature provider. Here are the tested options:
Option 1: Documenso (Open Source — Recommended for Self-Hosting)
Cloud: Free tier (5 docs/month) or Individual plan ($25/month, unlimited)
Self-hosted: Free, unlimited, runs on Docker (EC2/ECS)
API: Full REST API on all plans including self-hosted
ESIGN_NDA_TEMPLATE_ID: the template ID from step 1
The backend auto-detects the provider and formats API calls accordingly. If no
provider is configured (env vars are empty), the NDA step is skipped and requests
go straight to admin review.
Important Notes
The CloudFormation stack MUST be deployed in us-east-1 (WAF + CloudFront requirement)
The frontend uses DEMO_MODE=true by default for local development. The deploy script
sets up the real API URL via environment variables during build.
Admin authentication uses Cognito. First login requires setting a new password.
Public visitors do NOT need to log in. They see certifications, stats, and public docs.
Gated docs show a "Request Access" button that collects name/email/company/reason.
All document downloads generate presigned S3 URLs (1-hour expiry) and are audit-logged.
NDA integration is completely optional — the trust center works fully without it.
Customization Options
After the initial build, users can ask to:
Add or remove documents
Change which docs are public vs. gated
Add new certification types
Customize colors/branding
Add a custom domain
Connect an e-signature provider for NDA automation
Switch the NDA flow from admin-approved to auto-approved (NDA signed = access granted)
