For IT administrators

Your subdomain, your region, your tools. A person still approves.

Each product gets a working trust center address the moment you create it. Point your own subdomain at it when you're ready, keep data in the region you chose, and let scripts or agents submit drafts for review.

Company settings: MailMerge LabsExample

Home region

EUWest Europe
USCentral US

Chosen once and fixed. Applies to every trust center in this company.

Trust centers

  • SecureMailMergetrust.example.comCustom domain
  • MailMerge Insightsinsights.simpletrustcenter.exampleHosted address
Example company settings: EU West Europe selected as the fixed home region, and two trust centers, one on a custom domain and one on its hosted address.

Upload, review, publish

Your release pipeline or an AI agent can submit new versions. Approval and publication stay with people on your team.

  1. 1. Draft submitted privacy-policy-v4.3.docx By API key "docs-sync", allowed to submit drafts for SecureMailMerge Web page ready PDF ready
  2. 2. Human review Waiting for approval Priya Shah is checking 12 additions and 3 removals

    This key can submit drafts. It cannot approve or publish.

  3. 3. Published Privacy Policy v4.3 Published 16 Oct 2026, effective 1 Nov 2026. Subscribers notified. Upcoming

Accepted uploads

  • Ordinary documents: Markdown, DOCX or PDF
  • DPA templates: Markdown or DOCX
  • Every version available as a web page and a PDF

API keys

  • Issued by the company owner and revocable
  • Scoped to specific trust centers and permissions
  • Integrations check status through the API

DPA templates that become forms

Write your DPA in Markdown or Word with placeholders. SimpleTrustCenter reads the fields and builds the form that customers fill in.

  • Adjust each fieldSet the label, type, whether it is required, and validation. The field setup is versioned with the approved template.
  • Preview before you submitCheck the web and PDF versions, with sample values, and confirm where the signature goes.
  • Why not PDF templatesA fixed PDF layout can't make room for long addresses or extra clauses, so DPA templates use Markdown or DOCX.
dpa-v3.1.docx: fields foundExample
FieldLabelTypeRequired
customer_legal_nameLegal nameTextYes
registered_addressRegistered addressMulti-lineYes
signer_titleSigner's job titleTextYes
privacy_contactPrivacy contact emailEmailNo

Found Signature position on page 9

Example of four fields read from a DOCX DPA template, with labels, types and requiredness, and the signature position found.

Sign-in and integrations at launch

What is included from the start, and what is not yet.

Included

  • Sign-in links by email for your team, customers and signers. No passwords to manage.
  • One customer identity across all your company's trust centers
  • Owners assign administrators to specific trust centers
  • An API for every action people can take in the app

Not at launch

  • Single sign-on
  • Authorizing third-party apps through OAuth
  • Outbound webhooks
  • Moving a company to another region

IT questions

What data stays in our home region?

Documents, customer data, signed DPAs, audit records and backups are stored in the region you choose for your company: EU (West Europe) or US (Central US).

Can an AI agent publish a document?

No. An API key can submit drafts within its permissions. Approval and publication always need a signed-in person, even when that person's own drafts may be self-approved.

How do we use our own domain?

Every trust center works on its hosted address right away. You can add a subdomain you own, such as trust.yourcompany.com, from the trust center settings.

How do integrations learn about changes?

At launch, your integration queries the API for document and agreement status. Webhooks are not available yet.

Is there API reference documentation?

Not yet. Every product action is available through the API with the same permissions as in the app, and we can share API details when we walk you through the product.

See setup, uploads and approval rules

We will walk you through region selection, API uploads and approval rules end to end.