- Knowledge base: upload, organize, and maintain the security artifacts that describe your program.
- Questionnaire answering: answer security questionnaires that other organizations send you using the artifacts in your Knowledge base.
What Trust Center is for
Other organizations ask for evidence of your security program in two ways. They send a security questionnaire, or they assess you on VISO TRUST and request artifacts through a collection request. Trust Center reduces the manual work for both. Artifact Intelligence analyzes the artifacts in your Knowledge base and makes them available to:- Answer questionnaires: Artifact Intelligence drafts answers to inbound questionnaires from your Knowledge base artifacts.
- Share evidence with organizations that assess you: VISO TRUST adds your public artifacts to every relationship where another organization has you as a vendor, and to its open assessments. They don’t need to request those artifacts again.
- Power Vendor Discovery: VISO TRUST analyzes your artifacts to identify subservicers referenced in your documents, surfacing them in your Vendor Discovery feed.
Private artifacts in your Knowledge base aren’t shared outside your organization. VISO TRUST uses them inside your instance to answer questions and power discovery. Only artifacts you make public are shared with organizations that assess you. See Artifact visibility.
Adding artifacts to your Knowledge base
1
Go to Trust Center → Knowledge base
To add artifacts straight into a folder, select the folder first.
2
Click Upload artifact
Upload files by dragging and dropping, opening a file browser, or submitting a webpage URL.Accepted inputs include:
- Security documents (SOC 2 reports, ISO 27001 certificates, penetration test reports)
- Compliance documents (DPAs, privacy policies, sub-processor disclosures)
- Policies and procedures
- Security overview pages (via URL)
- Any other documentation describing your security program
3
Wait for analysis
Artifact Intelligence processes each document automatically. The artifact’s Status updates in the table as processing runs. Once an artifact is Completed, it’s indexed and available for VISO Chat Agent, questionnaire answering, and vendor discovery.
Finding artifacts
The Knowledge base table lists each artifact’s Type, Name, Status, Assurance, Valid until date, and Folder. The table updates as artifacts finish processing, so you don’t need to refresh.- Search artifacts by name.
- Filter by Type, Validity (Expired or Expiring soon), Status, or Visibility (Public or Private). Click Clear all to reset filters.
- Click a column header to sort.
Organizing artifacts with folders
Folders group related artifacts, such as the evidence for one product or region. You can also scope a questionnaire to specific folders so Artifact Intelligence answers only from those artifacts. See Answer Inbound Questionnaires.- Create a folder: click New folder in the left panel, enter a Folder name and an optional Description, then click Create.
- Move artifacts: drag an artifact row onto a folder in the left panel, or open the row’s actions menu and select Move to folder. To move several at once, select their checkboxes and click Move to folder. Select Unassigned in the Move to folder menu to take an artifact out of its folder.
- Reorder folders: drag folders up or down in the left panel.
- Edit or delete a folder: select the folder, open the actions menu next to Upload artifact, and select Edit folder or Delete folder. Deleting a folder keeps its artifacts in your Knowledge base without a folder.
Managing artifacts
Open an artifact row’s actions menu to manage it:- Make public or Make private: change who can access the artifact. See Artifact visibility.
- Exclude artifact or Include artifact: stop Trust Center from answering with an artifact, or add it back. See Excluding artifacts.
- Delete artifact: permanently remove the artifact. To delete several at once, select their checkboxes and click Delete.
Artifact visibility
- Private artifacts are accessible to everyone in your organization and aren’t shared with other organizations.
- Public artifacts are accessible to users outside your organization who create a relationship with your company on VISO TRUST.
Excluding artifacts
An excluded artifact stays in your Knowledge base, but Trust Center no longer uses it to answer questionnaires or Ask anything questions. Exclude an artifact when it’s outdated, duplicated, or irrelevant but you want to keep it on file. VISO TRUST also excludes an artifact automatically when a newer artifact of the same audit type supersedes it. You can’t re-include a superseded artifact.Who can manage the Knowledge base
Keeping your Knowledge base current
The value of Trust Center depends on how current your documentation is. Outdated artifacts reduce the quality of AI-generated answers and may give organizations that assess you an inaccurate picture of your security posture. Recommendations:- Upload new SOC 2 or ISO 27001 reports as soon as they’re issued
- Update your sub-processor list whenever it changes
- Remove, replace, or exclude expired artifacts so outdated documents don’t generate misleading answers. Filter by Validity to find them.
- Include your security and privacy pages via URL so Artifact Intelligence can answer from them
Asking questions about your evidence
Click Ask anything in the Trust Center header to open VISO Chat Agent. The assistant scopes itself to your Knowledge base and answers from your own artifacts. Use it to check what evidence you have on file before another organization requests it. See What you can ask for example questions. Organizations that assess you on VISO TRUST don’t see your private artifacts. When they ask VISO Chat Agent about your organization, it answers from the artifacts in their relationship with you, which include your public Trust Center artifacts. Keeping public artifacts complete and current means fewer follow-up requests sent to your security team.Trust Center vs. assessment artifacts
Assessment artifacts collected from a vendor are scoped to that specific relationship and assessment. Trust Center artifacts are organization-wide and power AI capabilities across your program.