Company trust profiles

Prove your company can be trusted. Once.

Before two companies work together, each asks the other for the same things: registration details, certificates, insurance, security and privacy practices, and the documents to prove them. BordersHub lets a company publish all of this once, in one structured profile backed by its own documents, and share it only with the companies it approves.

Reviewing other companies is free. Publishing your own profile: CAD $100 per month, plus applicable taxes. For businesses of any size, in any country and industry.

Example Company Ltd.
Example trust profile
Published · v3
  • Corporate identity & registration 2 documents
  • Certifications & standards 3 documents
  • Security & privacy 4 documents
  • Data hosting & residency 1 document
  • Approved by CEO and Security Officer 12 Sep
Full profile and documents: visible only to companies Example Company has approved.
Digitally signed & fingerprinted: anyone can confirm this version is genuine and unaltered.
Why it exists

Every new business relationship starts with the same paperwork

A buyer, partner or investor has to know a company is real, compliant and safe to work with. Today that means questionnaires, spreadsheets and email attachments, repeated for every relationship and out of date as soon as they are sent.

Without BordersHub

  • The same questions answered again for every customer, partner and investor
  • Certificates and policies emailed as attachments, with no control over where they go
  • Expired documents still circulating, and nobody sure which version is current
  • No record of who received what, or when

With BordersHub

  • One structured profile, answered once and kept up to date in one place
  • Documents stay in your private vault and are shared only with companies you approve
  • Invite any company with one link, even before it joins, to see your profile or share theirs
  • Expiry dates on documents, and each published version approved by your own team
  • A permanent log of every view and download, on both sides
  • Trust Analytics: see who viewed your profile, which documents they downloaded and who checked your records
  • AI Questionnaire: ask your own profile and documents questions in plain language and get answers from them
What BordersHub is

Three things, working together

A trust profile

A structured description of your company across up to 31 areas: identity, certifications, security, privacy, operations, finances and more. The areas you must complete depend on your industry.

An evidence vault

The documents behind each statement, such as certificates, policies, insurance and audit reports, stored privately, linked to the claim they support, with expiry dates flagged on your dashboard before they lapse.

Controlled sharing

Other companies request access; you approve or decline each one, and can revoke at any time. Every view and download is recorded in an audit log, and Trust Analytics shows who looked at your profile and how far each relationship has got.

How it works

Two sides of the same relationship

When others need to check your company

For suppliers, service providers and anyone answering due-diligence requests.

1
Register your company
Choose your industry; BordersHub shows which sections are required for it.
2
Fill in your profile and attach documents
Colleagues can contribute; each statement can be backed by a document.
3
Approve and publish
A version is published only after people in your company review and approve it. Their names and roles are recorded.
4
Share one link
Send your public link to anyone, or an invite link that gives a company access as soon as it signs up. When a company requests access to the full profile, you decide.
5
See who is interested
Trust Analytics shows who viewed your profile, which documents partners downloaded and who checked your records, so you know which conversations are moving.

When you need to check another company

For procurement, compliance, legal, security and investment teams.

1
Find the company
Search the registry or open the link they sent. Not on BordersHub yet? Send them an invite link asking for their profile.
2
Request access
Send a request with a short note on what you need. It's free: reviewing other companies needs no subscription.
3
Review the full profile
Once they approve, read every section and download the documents behind them.
4
Keep it current
You always see their latest published version, with expiry dates on their documents.
Who sees what

You decide who sees each level of detail

Nothing beyond your basic registry entry is visible until you approve a company.

Anyone

Your public registry entry

  • Company name, logo and company ID
  • Legal name, legal form, jurisdiction, status, website and industry
  • Whether a profile is published, and since when
  • Anonymous visits are counted by country only, with no tracking scripts or cookies

Companies you approve

Until you revoke access

  • Your full published profile, every section
  • Your evidence documents, to view and download
  • Who in your company approved the published version

Your own team

With roles you assign

  • Drafts, submissions and approvals
  • Who requested access and what they viewed or downloaded
  • Trust Analytics: who viewed your profile, downloaded your documents or checked your records
  • Team, settings and the full audit log (administrators)
What a profile covers

The questions buyers actually ask, in one place

Common sections apply to every company; industry sections appear for the industries that need them.

The company

  • Corporate & Entity Identity
  • Products, Services & Capabilities
  • Commercial Readiness
  • People, Offices & Contacts
  • Legal & Contracting
  • Operational Readiness
  • Business Continuity & Incident Response — General

Trust & compliance

  • Certifications & Standards
  • Financial & Insurance
  • Sustainability
  • Trust Chain: Key Vendors & Partners
  • Security Posture & Certifications
  • Privacy & AI Governance

Operations

  • Quality Assurance
  • Supply Chain

Technology & data

  • Infrastructure & Data Residency
  • Access Control & Identity Management
  • Business Continuity & Incident Response — Technical
  • Platform & Deployment
  • Integrations & APIs
  • Secure Engineering & Software Supply Chain
  • Tenant Isolation, Data Access & Exit

Industry-specific

  • Manufacturing Profile
  • Financial Services Profile
  • Healthcare & Life Sciences Profile
  • Energy Profile
  • Logistics Profile
  • Professional Services Profile
  • Construction & Engineering Profile
  • Oil & Gas Profile
  • OT & Industrial Control Security

What BordersHub is not

BordersHub does not certify, audit or verify companies. Each company is responsible for what it declares, and backs its statements with its own documents.

What BordersHub gives you is structure, control and a record: the same information in the same format, from the source, with the documents attached and a log of who saw what. The decision to trust a company remains yours.

Built to hold sensitive documents

  • Multi-factor authentication, mandatory for administrators
  • Documents in private storage, never behind public links
  • Append-only audit log of every significant action
  • No third-party tracking scripts or cookies; analytics are recorded on our own servers
  • Every published profile fingerprinted (SHA-256) and digitally signed (ECDSA P-256), so any alteration is detectable
  • Daily backups; deleting your company removes its data
Read the Trust Center

Invite a company to see your profile in one link

Send a customer or prospect a link to your trust profile, or ask a supplier for theirs, even if they aren’t on BordersHub yet. They sign up for free, accept, and the trust relationship is already in place: no searching, no forms, and no waiting for approval if you choose. Each link works once, for 24 hours, and you can cancel it until it’s used.

Start inviting

Received a trust profile? Check it’s genuine

Every published profile is sealed with a SHA-256 fingerprint and a BordersHub digital signature. Change a single character and both stop matching. Enter the fingerprint, scan the QR code on the document or open its verifiable copy to confirm it is unaltered and still the current version. No account needed.

Verify a document

Connect your own systems

A read-only JSON API gives your procurement, risk or ERP software the same information you see: your profile, trusted companies, their profiles and documents, access requests and audit log. Administrators issue the API tokens.

API documentation
Pricing

One price for every organization

CAD $100 / month

Per organization, plus applicable taxes. Billed every month in advance; cancel at any time. Create an account and prepare your profile for free, and subscribe when you're ready to publish. Reviewing other companies' profiles is always free.

Create your company profile

Publishing your profile includes everything, for your whole team:

Your full trust profile, with every section for your industry
Private evidence vault with expiry tracking
Partners: contacts and requests with the companies you work with
Your whole team, with admin, contributor and approver roles
Internal approval workflow and full audit log
Trust Analytics: who viewed, downloaded and verified your profile
AI Questionnaire: chat with your own profile and evidence (uses your own AI provider API key)
API access for your own systems
Questions

Frequently asked

Any business that has to prove it is trustworthy to customers, partners or investors, and any business that has to check others before working with them. It works for companies of any size, in any country and industry.

One plan for everyone: CAD $100 per organization per month, plus applicable taxes. It includes every feature for your whole team. Reviewing other companies is free: create an account, request trust and view the profiles and evidence companies share with you without paying. Preparing your own trust profile, evidence and approvals is free too; the subscription is needed to publish it, use Partners, the API and the AI Questionnaire, and show a verified badge. There is no free trial. You can cancel at any time; the subscription then ends at the close of the paid month.

Only the people in your company, and the people in companies you have approved. Anyone else sees only your basic registry entry.

Yes. Create an invite link and send it yourself: either to share your trust profile with them, or to ask for theirs. They create a free account, accept, and the trust request is already in place; if you chose to approve straight away, they see your full profile right after. Each link works once, for 24 hours, and you can cancel it until it is used. Your admins are emailed whenever a link is created.

Yes. You can revoke an approval at any time and it takes effect immediately. Copies a company already downloaded while it had access cannot be recalled, which is why every download is logged.

Yes. Trust Analytics shows who viewed your public entry and full profile, which documents trusted companies downloaded, and who checked your records on the Verify page, with where activity came from. Companies you approved are shown by name; people who are signed in elsewhere, by their organization; anonymous visitors, by country only. It is recorded on BordersHub's own servers, with no tracking scripts or cookies, and kept for 13 months.

A chat where your team asks questions about your own trust profile and uploaded documents, such as "is MFA enabled and defined?", and gets answers taken from them. It reads your full profile and every evidence file, answers only about them, and says when they don't cover a question. It is turned off until an admin adds your own AI provider API key (Claude or ChatGPT) in Settings, and it is part of the subscription. When you ask a question, your profile and files are sent to the AI provider you chose using your own key; BordersHub doesn't store the questions or answers and never uses your content to train AI models. Check answers before relying on them.

No. Companies declare their own information and attach their own evidence. BordersHub keeps it structured, current and controlled, and records who accessed it; the judgement is yours.

Each profile shows its published version and date, and documents can carry an expiry date. Companies with access always see the latest published version, and the Verify page tells anyone whether a version they hold is still current, has been replaced, or was withdrawn.

Each version is sealed the moment it is published. BordersHub records a SHA-256 fingerprint of the exact content and signs it with that company's own signing key (ECDSA P-256), which is kept separately from the database. Changing even one character changes the fingerprint and breaks the signature. Enter the fingerprint printed on the document, scan its QR code, or open its verifiable copy on the Verify page; no account is needed.

No, and it doesn't need to be. Encryption hides content; fingerprints and digital signatures prove that content has not changed. Profiles and documents are kept private by access control, so only the companies you approve can see them, while the signature lets anyone holding a copy confirm it is genuine. It proves the document is exactly what was published, not that the company's statements are true.

Yes. Download the verifiable copy: a single file holding the published record, its fingerprint and BordersHub's signature. Keep it as evidence of exactly what a company published and when. It can be checked on the Verify page or independently with standard tools such as OpenSSL, using the company's public key that BordersHub publishes.

Where it is hosted is listed in the Trust Center. An administrator can delete your company at any time, which permanently removes its profile, documents and accounts.

Yes. Colleagues who register with your company email domain ask to join your organization and an administrator approves them; anyone else can be invited. Each gets a role, such as contributor or approver, and a version is published only after it is approved internally.

Answer the trust questions once.

Create your company profile, attach your documents, and decide who sees them.