Trust starts with clear answers.
The CUTO Trust Center brings together the information Security, Procurement, Privacy, Legal and Enterprise Architecture need for their review. It shows what is public, what belongs in contract documents and which evidence is provided through controlled access.
Review CUTO against your requirements.
Each role starts with different questions. The Trust Center directs you to the relevant information without mixing technical, legal and contractual statements.
Security
How CUTO protects identities, access, data, activity records and operational resilience.
Privacy
How website and service data is processed, responsibilities are separated and rights are supported.
Contracts and procurement
Which contractual terms and privacy and security annexes apply to the relevant service scope.
Data locations
Where data is stored and processed and how administrative access and transfers are addressed.
Subprocessors
Which providers are used for which purpose and how changes are communicated.
Controlled evidence
Detailed materials are provided through controlled access based on purpose, audience and access requirements.
The right evidence for each review stage.
CUTO separates public guidance, contractual commitments and controlled detailed evidence. This makes clear which statement applies in which context.
Public
Core information about security, privacy, data locations and service providers.
Contractual
Applicable terms and annexes define the binding service and responsibility framework.
Controlled
Eligible recipients receive detailed security and architecture materials through a controlled access path.
Start your review with the right question.
Tell us the scope of your review. CUTO will direct you to the relevant public information, contract documents or controlled evidence.
Discuss a procurement reviewRead the security overviewService privacy
How CUTO and customers divide responsibility by processing purpose and how rights, support access and data lifecycles are addressed.
Cookies and preferences
Which cookies and trackers are used and how visitors give, change or withdraw their preferences.
Data processing terms
Which processing is performed on customer instructions and which privacy, security, subprocessor and lifecycle terms apply.
Security and controls annex
Which technical and organisational measures protect the agreed service scope and how they are reflected in the contract.
Data lifecycle
How retention, export, return, deletion, backup expiry and exceptions are handled for each data object.
Support and incidents
How support access, operational contacts, escalation and communication are handled during security events.
Current information and contact
For a specific procurement review, tell us the service scope and question. CUTO will identify the information and documents relevant to that context.