> ## Documentation Index
> Fetch the complete documentation index at: https://docs.visotrust.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Trust Center

> Use Trust Center to manage your organization's security evidence in the Knowledge base, answer inbound questionnaires, and ask questions about your own artifacts.

**Trust Center** is where you manage your own organization's security evidence inside VISO TRUST. Use it when your organization is the vendor being assessed. Navigate to **Trust Center** in the main navigation to open it. VISO TRUST enables Trust Center per organization.

Trust Center has two tabs:

* **Knowledge base**: upload, organize, and maintain the security artifacts that describe your program.
* **Questionnaire answering**: [answer security questionnaires that other organizations send you](/trust-and-questionnaires/answer-inbound-questionnaires) using the artifacts in your Knowledge base.

Click **Ask anything** in the Trust Center header to open [VISO Chat Agent](/viso-chat/overview) scoped to your own artifacts. See [Asking questions about your evidence](#asking-questions-about-your-evidence).

## What Trust Center is for

Other organizations ask for evidence of your security program in two ways. They send a security questionnaire, or they assess you on VISO TRUST and request artifacts through a collection request. Trust Center reduces the manual work for both.

Artifact Intelligence analyzes the artifacts in your Knowledge base and makes them available to:

* **Answer questionnaires**: Artifact Intelligence drafts answers to inbound questionnaires from your Knowledge base artifacts.
* **Share evidence with organizations that assess you**: VISO TRUST adds your public artifacts to every relationship where another organization has you as a vendor, and to its open assessments. They don't need to request those artifacts again.
* **Power Vendor Discovery**: VISO TRUST analyzes your artifacts to identify subservicers referenced in your documents, surfacing them in your [Vendor Discovery](/third-parties/vendor-discovery) feed.

<Note>
  Private artifacts in your Knowledge base aren't shared outside your organization. VISO TRUST uses them inside your instance to answer questions and power discovery. Only artifacts you make public are shared with organizations that assess you. See [Artifact visibility](#artifact-visibility).
</Note>

## Adding artifacts to your Knowledge base

<Steps>
  <Step title="Go to Trust Center → Knowledge base">
    To add artifacts straight into a folder, select the folder first.
  </Step>

  <Step title="Click Upload artifact">
    Upload files by dragging and dropping, opening a file browser, or submitting a webpage URL.

    Accepted inputs include:

    * Security documents (SOC 2 reports, ISO 27001 certificates, penetration test reports)
    * Compliance documents (DPAs, privacy policies, sub-processor disclosures)
    * Policies and procedures
    * Security overview pages (via URL)
    * Any other documentation describing your security program
  </Step>

  <Step title="Wait for analysis">
    Artifact Intelligence processes each document automatically. The artifact's **Status** updates in the table as processing runs. Once an artifact is **Completed**, it's indexed and available for VISO Chat Agent, questionnaire answering, and vendor discovery.
  </Step>
</Steps>

## Finding artifacts

The Knowledge base table lists each artifact's **Type**, **Name**, **Status**, **Assurance**, **Valid until** date, and **Folder**. The table updates as artifacts finish processing, so you don't need to refresh.

* **Search artifacts** by name.
* Filter by **Type**, **Validity** (**Expired** or **Expiring soon**), **Status**, or **Visibility** (**Public** or **Private**). Click **Clear all** to reset filters.
* Click a column header to sort.

A lock icon marks a private artifact and a globe icon marks a public one. An eye-off icon marks an excluded artifact. Hover over it to see the exclusion reason.

## Organizing artifacts with folders

Folders group related artifacts, such as the evidence for one product or region. You can also scope a questionnaire to specific folders so Artifact Intelligence answers only from those artifacts. See [Answer Inbound Questionnaires](/trust-and-questionnaires/answer-inbound-questionnaires#creating-a-questionnaire).

* **Create a folder**: click **New folder** in the left panel, enter a **Folder name** and an optional **Description**, then click **Create**.
* **Move artifacts**: drag an artifact row onto a folder in the left panel, or open the row's actions menu and select **Move to folder**. To move several at once, select their checkboxes and click **Move to folder**. Select **Unassigned** in the **Move to folder** menu to take an artifact out of its folder.
* **Reorder folders**: drag folders up or down in the left panel.
* **Edit or delete a folder**: select the folder, open the actions menu next to **Upload artifact**, and select **Edit folder** or **Delete folder**. Deleting a folder keeps its artifacts in your Knowledge base without a folder.

Select **All artifacts** to see every artifact regardless of folder. An artifact belongs to at most one folder.

## Managing artifacts

Open an artifact row's actions menu to manage it:

* **Make public** or **Make private**: change who can access the artifact. See [Artifact visibility](#artifact-visibility).
* **Exclude artifact** or **Include artifact**: stop Trust Center from answering with an artifact, or add it back. See [Excluding artifacts](#excluding-artifacts).
* **Delete artifact**: permanently remove the artifact. To delete several at once, select their checkboxes and click **Delete**.

To download artifacts, open the actions menu next to **Upload artifact** and select **Download artifacts**. Inside a folder, the download includes only that folder's artifacts.

### Artifact visibility

* **Private** artifacts are accessible to everyone in your organization and aren't shared with other organizations.
* **Public** artifacts are accessible to users outside your organization who create a relationship with your company on VISO TRUST.

VISO TRUST shares a public artifact once its analysis is **Completed**. Make an artifact public when you want organizations that assess you to reuse it without requesting it again.

### Excluding artifacts

An excluded artifact stays in your Knowledge base, but Trust Center no longer uses it to answer questionnaires or **Ask anything** questions. Exclude an artifact when it's outdated, duplicated, or irrelevant but you want to keep it on file.

VISO TRUST also excludes an artifact automatically when a newer artifact of the same audit type supersedes it. You can't re-include a superseded artifact.

### Who can manage the Knowledge base

| Action | Admin | Program Manager | Contributor | Viewer |
| - | - | - | - | - |
| View and download artifacts | Yes | Yes | Yes | Yes |
| Upload, delete, and change visibility | Yes | Yes | No | No |
| Create, edit, and delete folders; move artifacts | Yes | Yes | No | No |
| Exclude or include artifacts | Yes | Yes | No | No |

## Keeping your Knowledge base current

The value of Trust Center depends on how current your documentation is. Outdated artifacts reduce the quality of AI-generated answers and may give organizations that assess you an inaccurate picture of your security posture.

Recommendations:

* Upload new SOC 2 or ISO 27001 reports as soon as they're issued
* Update your sub-processor list whenever it changes
* Remove, replace, or exclude expired artifacts so outdated documents don't generate misleading answers. Filter by **Validity** to find them.
* Include your security and privacy pages via URL so Artifact Intelligence can answer from them

## Asking questions about your evidence

Click **Ask anything** in the Trust Center header to open VISO Chat Agent. The assistant scopes itself to your Knowledge base and answers from your own artifacts. Use it to check what evidence you have on file before another organization requests it. See [What you can ask](/viso-chat/what-you-can-ask#trust-center-questions) for example questions.

Organizations that assess you on VISO TRUST don't see your private artifacts. When they ask VISO Chat Agent about your organization, it answers from the artifacts in their relationship with you, which include your public Trust Center artifacts. Keeping public artifacts complete and current means fewer follow-up requests sent to your security team.

## Trust Center vs. assessment artifacts

| | Trust Center | Assessment artifacts |
| - | - | - |
| **Who uploads** | Your team (as the vendor) | Your team or the vendor, per assessment |
| **Scope** | Your organization | A specific relationship and assessment |
| **Used for** | VISO Chat Agent, questionnaire answering, vendor discovery | Risk scoring, control mapping, residual risk |
| **Visibility** | Private artifacts: your organization only. Public artifacts: also shared with organizations that assess you | The assessing organization's VISO TRUST instance |

Assessment artifacts collected from a vendor are scoped to that specific relationship and assessment. Trust Center artifacts are organization-wide and power AI capabilities across your program.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.