Trust Hex
One Trust Hex for everything you make and sell
One verified page for your products, compliance, sustainability, and supply chain.
What is Trust Hex?
Trust Hex is a public hub that pulls your published compliance documents, product data, sustainability metrics, company profile, and supply chain information into one hashcode-secured page. Every document links to its own verifiable QR code. No extra work — it populates from what you already publish on Sustalium.
The name comes from Sustalium's hexagonal logo — six sides, six dimensions of trust: compliance, sustainability, supply chain, security, identity, and transparency.
Beyond Vanta, Drata, and SafeBase
SaaS security pages solve one problem. Trust Hex solves a bigger one.
| Vanta / Drata / SafeBase | Trust Hex by Sustalium | |
|---|---|---|
| Coverage | SOC 2, ISO 27001, HIPAA, GDPR — SaaS security posture only | Product compliance (REACH, GPSR, ESPR, Prop 65), sustainability metrics, supply chain, AND traditional SaaS security |
| What it proves | "Our software is secure" | "Our products are compliant, our supply chain is transparent, our business is sustainable" |
| Verification | PDF reports, static pages, manual security reviews | Hashcode-secured live docs, QR codes on every item, independently verifiable URLs |
| Audience | IT procurement, security teams | Retailers, distributors, regulators, consumers, auditors, AND security teams |
| Physical products | Not applicable (SaaS only) | Certificates for any product across any industry and market |
| Supply chain | Vendor risk questionnaires only | Connected supplier trust pages, chain-of-custody visibility |
See it in action
Sustalium publishes its own compliance documents on Trust Hex — WCAG 2.1 AA, GDPR & DPA, and the EU Cyber Resilience Act. 3 live documents, 1 brand, 1 product. All verifiable.
Frequently asked questions
How is Trust Hex different from Vanta or Drata?
Vanta and Drata focus on SaaS security posture — SOC 2, ISO 27001, penetration testing. Trust Hex covers products, compliance, sustainability, and supply chain in addition to security. It is built for any business that makes or sells physical products, not just SaaS companies.
What appears on a Trust Hex page?
Your company profile, product catalog with compliance documents, sustainability metrics, company attestations (code of conduct, modern slavery statement), security and privacy policies, and connected supply chain partners. Everything is pulled from your existing published data — no extra work.
Does this require extra work on top of Sustalium?
No. If you already publish compliance documents and products on Sustalium, your Trust Hex page populates automatically. Just toggle what you want to display.
Can customers verify documents from the Trust Hex page?
Yes. Every compliance document on a Trust Hex page links to its own hashcode-secured public page and QR code. Anyone can verify authenticity independently.
Which plan includes Trust Hex?
Trust Hex is included in all paid plans (Pay As You Go, Starter, Growth, and Custom). The Demo plan does not include a Trust Hex page.