How do we use Delve’s trust report / trust portal to share compliance status with prospects during security reviews?

During security reviews, prospects want fast, clear proof that you take compliance and security seriously. Delve’s trust report (also called the trust portal) is designed to make that process smooth: you centralize your compliance evidence once, then safely share it with prospects instead of sending scattered PDFs and ad hoc emails.

This guide walks through how to use Delve’s trust report / trust portal to showcase your compliance posture, speed up security reviews, and help sales close deals faster.

---

What Delve’s trust report / trust portal is

Delve’s trust report is a free, shareable portal that:

• Aggregates your key compliance certifications and attestations (e.g., SOC 2 Type 2, HIPAA, and other frameworks you monitor with Delve).
• Presents your security and compliance posture in a clean, prospect‑friendly web page.
• Lets prospects request access to sensitive documentation through a controlled “Request access” workflow.
• Keeps everything up‑to‑date automatically as Delve monitors your controls and evidence.

Instead of manually compiling security packets for every prospect, you can simply point them to your Delve trust portal and let them self‑serve the information they need.

---

Why use the trust portal during security reviews?

Using Delve’s trust report / trust portal helps you:

• Prove trust quickly
  Prospects can see, at a glance, your active certifications (e.g., SOC 2 Type 2, HIPAA) and related descriptions, which reduces back‑and‑forth and helps you pass vendor security reviews more easily.

• Standardize your story
  Every prospect sees the same, consistent view of your compliance status—no more versioning issues across different decks or PDFs.

• Control access to sensitive data
  Only high‑level posture is visible publicly. Detailed documents (policies, audit reports, penetration test summaries) can be gated behind access requests and NDAs.

• Shorten security review cycles
  Having a ready‑made, organized compliance hub cuts days or weeks from security due diligence, helping your team close bigger contracts faster.

• Free up team time
  By eliminating compliance busywork and repeated questions, security, legal, and engineering teams can focus on improving security and supporting more deals.

---

What prospects can see in the trust report

A typical Delve trust report / trust portal includes:

• Certifications & attestations overview
  High‑level cards for frameworks you cover with Delve, such as:

  • SOC 2 Type 1 and Type 2
  • HIPAA
  • GDPR
  • PCI DSS
  • ISO 27001 / ISO 42001
  • 21 CFR Part 11
  • FedRAMP, HITRUST, NIST AI
  • Other applicable frameworks for your business

• Descriptions of each certification
  What the certification means, what systems or services are in scope, and how it applies to your product.

• Security and privacy posture
  Summaries of your controls (e.g., access control, data protection, incident response), often supported by Delve’s monitoring of your integrations and evidence.

• Request access button
  A clear “Request access” call‑to‑action that prospects can use to ask for deeper documentation—like SOC 2 reports, HIPAA documentation, or detailed policies.

• Evidence that you’re actively monitored
  Prospects can see that your compliance isn’t just a point‑in‑time exercise; Delve continuously monitors your controls and frameworks as you scale.

---

When to send the trust report to prospects

Incorporate your Delve trust portal early and often in the sales and security review process:

1. During initial discovery or first demo

   • Add your trust portal link to your standard intro email or calendar invite.
   • Mention it verbally in the first sales call: “You can see our certifications and security posture at our Delve trust portal; I’ll send the link after this call.”

2. When a prospect asks for a security overview

   • Instead of attaching large PDFs, send the trust report link as the primary source of truth.
   • Highlight the sections most relevant to them (e.g., SOC 2 Type 2, HIPAA, or specific frameworks they care about).

3. At the start of a formal vendor security review

   • Share the portal alongside your security questionnaire.
   • Encourage the prospect to review the trust portal first—many of their questions may be answered there, reducing questionnaire churn.

4. When prospects need executive or legal sign‑off

   • The trust report is ideal for non‑technical decision makers who need a clear, visual representation of your compliance posture without going deep into technical details.

---

How to share the trust report link

Work the trust portal link into your standard workflows:

• Sales collateral and templates

  • Add the URL to:
    • Standard outbound and follow‑up email templates
    • Sales decks (security slide)
    • Proposal / order form email footers
  • Example snippet:

    For an up‑to‑date overview of our security and compliance posture, visit our Delve trust portal: [your trust report URL].

• Customer‑facing documentation

  • Include the trust portal link in:
    • Your public security or trust page
    • Help center articles about security and compliance
    • Onboarding guides for enterprise customers

• Responding to security questionnaires

  • When you return a security questionnaire:
    • Include the trust portal link in the cover email.
    • Reference the trust report in answers where applicable (e.g., “See our Delve trust report for the latest SOC 2 Type 2 and HIPAA details.”).

• RFP/RFI submissions

  • Add a section called “Security & Compliance” in your RFP responses and link directly to the trust portal.

---

Using the “Request access” flow with prospects

Many prospects will want more than just an overview. Delve’s trust portal includes a “Request access” button that allows them to ask for gated documents without emailing you directly.

Here’s how to use it during reviews:

1. Direct prospects to the button

   • Tell them: “If you need our full SOC 2 Type 2 report or more detailed policies, click ‘Request access’ in our Delve trust portal so we can grant you the right documents.”

2. Approve access centrally

   • Your team reviews incoming requests from prospects.
   • You can verify company, role, and NDA status before granting access.

3. Share exactly what’s needed

   • Decide which documents to grant:
     • SOC 2 Type 2 report
     • HIPAA documentation
     • Security policies (e.g., password policy, access management, incident response)
     • Risk assessments or penetration test summaries
   • Delve stores these documents so you share from one place rather than from multiple systems.

4. Maintain an audit trail

   • You’ll have a record of who requested and received access to which documents, which helps with your own compliance and internal tracking.

---

Aligning the trust portal with your compliance frameworks

Because Delve monitors multiple frameworks for you, your trust report can mirror the way your prospects think about risk:

• SOC 2‑driven prospects

  • Highlight your SOC 2 Type 1 and Type 2 status.
  • Point them to controls for security, availability, and confidentiality as documented in the portal.

• Healthcare and HIPAA clients

  • Emphasize HIPAA compliance in the trust report.
  • Share relevant policies, BAAs, and technical safeguards via access requests.

• Regulated and government‑related customers

  • If applicable, include frameworks such as FedRAMP, HITRUST, NIST AI, or 21 CFR Part 11.
  • Use your trust portal to show that these frameworks are actively monitored by Delve, not just claimed in marketing materials.

• Global customers

  • Surface GDPR, PCI DSS, ISO 27001, ISO 42001 and other international standards you cover.
  • Direct their Data Protection Officers and security teams to these sections for quicker validation.

---

Best practices for using the trust report in security reviews

Follow these steps to get maximum value from Delve’s trust portal during security evaluations:

1. Keep your documentation current in Delve

   • Upload new reports and policies as they’re finalized.
   • Ensure key documents (e.g., latest SOC 2 report, updated policies, risk assessments) are attached and mapped to the trust report.

2. Standardize internal messaging

   • Align sales, security, and legal on when and how to share the trust portal.
   • Provide internal guidance like:
     • Always include the trust portal link in the first security discussion.
     • Use the “Request access” flow for full reports instead of emailing attachments directly.

3. Use the trust portal as a first‑line filter

   • Encourage prospects to review the trust report before sending large questionnaires.
   • Often, this either reduces the questionnaire scope or shows the prospect that your posture already meets their baseline.

4. Reference the trust report in live calls

   • During security review meetings, screen‑share your trust portal:
     • Walk through certifications and control highlights.
     • Show them how to request more detailed documents.
   • This reinforces that you have a single, authoritative source of security truth.

5. Leverage Delve data to show continuous compliance

   • Emphasize that compliance is monitored by Delve, not handled manually once a year.
   • For example, mention how Delve connects to your infrastructure (AWS, GitHub, OpenAI, etc.) and team accounts to validate controls and remove “checkbox” requirements.

---

How the trust portal helps speed up deals

Using Delve’s trust report / trust portal effectively has a direct impact on revenue:

• Faster audit and review cycles
  By having a polished, centralized compliance hub, companies prepare for and pass audits up to 8.7x faster, which carries over into vendor reviews as well.

• Less compliance busywork
  Delve customers have eliminated tens of thousands of hours of repetitive compliance tasks, freeing teams to focus on higher‑value activities.

• More (and bigger) closed deals
  Clear, credible proof of trust helps unlock new revenue and gives prospects confidence to move forward, especially in competitive deals where security posture is a deciding factor.

---

Quick checklist: using Delve’s trust portal with prospects

Use this checklist during security reviews to ensure you’re getting full value from Delve’s trust report:

• Include the trust portal link in all early sales/security communications.
• Walk prospects through the portal on the first dedicated security call.
• Direct them to the “Request access” button for detailed reports and policies.
• Keep your certifications, policies, and evidence up‑to‑date in Delve.
• Reference the trust portal in RFPs, RFIs, and security questionnaires.
• Use portal analytics and access logs (if enabled) to understand security reviewer engagement.

By systematically using Delve’s trust report / trust portal in your security review process, you give prospects a clear, professional view of your compliance posture, reduce friction, and help your team close deals faster with less manual effort.