Trust & procurement
Company materials for diligence
This hub is the Trustholm company surface: legal, subprocessors, and how we talk about evidence. Detailed Shipped vs Gap tables for Govern live under Govern trust. Migrate, ShareSight, and Bridge start from their product pages.
We do not claim SOC 2 Type II, ISO 27001, IRAP, or Essential Eight product certification on marketing pages. We publish what ships and what does not - product by product - so your security team can verify artifacts themselves.
Company materials
- Subprocessors - processors used across Trustholm services
- Privacy · Terms · Cookies
Product evidence
- Govern trust - Shipped vs Gap tables, downloads, persona pages, and trial verification paths
- Migrate · ShareSight · Bridge - product pages first; access form with product interest selected
Frequently asked questions
- Does Trustholm provide a SOC 2 report?
No. We do not hold SOC 2 Type I or Type II. We do not claim an observation period on this site. We do not hold ISO 27001, IRAP, or Essential Eight certification.
- Where is product-specific security evidence?
Govern publishes Shipped vs Gap evidence under Govern trust (security, isolation, audit, signing). Migrate, ShareSight, and Bridge evidence lives on each product page and is confirmed during access scoping.
- Is data hosted in Australia?
AU is the primary launch region for Govern. Exact residency for your contract is confirmed during onboarding for each product.
- How do procurement teams start?
Open subprocessors and legal from this hub. For Govern diligence packs and evidence tables, use Govern trust. For other products, request access with product interest selected.