# trustcenteraudit report: demo-saas.example

> Demo report on a fictional sample site.

**Score:** 24/100 · Scanned 2026-10-26T22:31:31.135Z

8 of 10 checks need attention (3 high priority).

- [ ] **Security or trust center page** (high): Not found at common paths.
- [x] **Privacy policy** (high): Found at /privacy.
- [ ] **Data Processing Agreement (DPA)** (high): Not found at common paths.
- [ ] **Subprocessor list** (medium): Not found at common paths.
- [x] **Terms of service** (medium): Found at /terms.
- [ ] **Public status page** (low): No status subdomain.
- [ ] **security.txt** (low): Missing.
- [ ] **Compliance frameworks mentioned (SOC 2, ISO 27001, HIPAA)** (high): GDPR
- [ ] **Key controls described (encryption, SSO, pen testing)** (medium): None found.
- [ ] **Trust portal (Vanta, Drata, SafeBase...)** (low): None detected.

---
Read-only: up to 17 small public page requests. We check whether pages exist and what they mention, not whether the claims are true or certified. Not a SOC 2, ISO 27001 or legal assessment.