The verified GRC partner directory
How TrustPartners verifies every listing
TrustPartners.directory exists so buyers can shortlist with confidence, not hope. Every published profile carries a transparent verification tier (0–3) based on evidence we reviewed, not claims we accepted at face value. We publish the methodology because trust is the product.
No pay-for-rank · 100% independent verification · Free to list
Free. No account required for buyers. Providers can apply in about five minutes.
Why publish this
Why we publish the methodology
Most directories ask buyers to trust a black box. TrustPartners.directory does the opposite: we explain what each tier means, what evidence supports it, and where the limits are. That transparency lowers risk for buyers and keeps expectations clear for providers.
The goal is not to replace your procurement process. The goal is to help you spend your time on firms that already show stronger trust signals before the first call, document request, or RFP.
Tiers
Four verification levels (0–3)
Each tier describes how much evidence TrustPartners has reviewed and how often we re-check when monitoring applies.
Evidence
What we store—and what we never store
We keep only the metadata buyers need to compare firms consistently and providers can share without exposing confidential material:
- Attestation type, dates, and expiration where available
- Auditor or assessor name when supplied
- Evidence type reviewed and verification dates
We do not store:
- Full SOC 2 or other confidential audit reports
- Internal control narratives or client lists from reports
- Any document that should remain privileged between you and your auditor
Workflows
How tiers change
Upgrades reflect stronger evidence or monitoring—not payment. Typical paths:
Tier 0 → 1
We locate a credible public trust center or compliance page, record the URL, and update the listing.
Tier 1 → 2
The provider submits certificate or attestation materials. An admin reviews, extracts allowed metadata, and updates the tier.
Tier 2 → 3
Requires Tier 2 evidence plus enrollment in monitoring. Quarterly re-verification is scheduled and reflected on the listing.
Downgrades
If a scheduled check fails, we allow a remediation window (about 30 days). If the issue is unresolved, the tier drops to match the evidence on file.
Bulk data import (admin)
For directory seeding, CSV import into the admin pipeline may clamp claimed tiers to a maximum of Tier 1 unless an admin explicitly enables trusted seeding. Tiers 2 and 3 in production should still follow the evidence workflows above—import is not a substitute for document verification.
Our promise
Accuracy guarantee
If any Tier 2 or higher listing on TrustPartners.directory is found to contain inaccurate compliance information, report it. We investigate within 48 hours, correct the listing, and personally verify three alternative providers for you — at no cost.
We can make that guarantee because verification accuracy is our reputation. Trust is not a marketing slogan on TrustPartners.directory — it is the obligation behind the product.
Providers
Badges and provider tools
Verified firms can display an embeddable badge that reflects the current tier in real time. The badge links back to the public profile on TrustPartners.directory, turning a claim into proof buyers can inspect.
- Tier-appropriate badge copy (listed vs verified vs monitored)
- Providers manage preview and embed code from the dashboard
- Badge imagery updates when the published tier changes
The provider dashboard includes verification status, next-tier requirements, evidence uploads where applicable, and (for eligible listings) Tier 3 monitoring enrollment—see https://www.trustpartners.directory/dashboard after you sign in.
FAQ
Common questions
Structured data helps search and AI systems cite TrustPartners.directory accurately.
- Does TrustPartners.directory rank firms by who pays?
- No. Rankings are based on verification depth, recency, and profile completeness — never payment. Sponsored visibility and subscription benefits do not rewrite the organic rules.
- Why is Tier 0 still published?
- Some listings appear for taxonomy completeness while evidence is pending. Tier 0 means we have not verified the claim; use Tier 1 and above when you want reviewed evidence in your shortlist.
- Does a TrustPartners tier replace my own diligence?
- No. The tier is an independent trust signal, not a substitute for procurement, legal review, or your own document requests. It helps you start from a stronger shortlist.
- Can I see the actual audit report?
- We do not host confidential reports. Profiles show metadata that helps you compare firms; your procurement process should collect the artifacts you need under NDA.
- How do I raise my tier?
- Start with Get Verified on TrustPartners.directory. Our team maps your categories and frameworks, tells you what evidence fits each tier, and processes submissions through the admin workflow.
Ranking rules are documented on How we rank.
Next steps on TrustPartners.directory
Providers can claim a profile and pursue verification. Buyers can compare shortlists using consistent tier and framework metadata across categories.
Get verified
List your firm with transparent evidence tiers. Start free and upgrade when you are ready to maintain verified status.
Keep exploring
Open the full directory to filter by framework, state, and tier, or jump to another category to build a shortlist with consistent verification metadata.