trustlists Data
The largest open directory of company trust centers, security pages, and compliance documentation.
Quick Start
# Fetch all trust centers
curl -s https://trustlists.org/api/trust-centers.json | jq '.data[:3]'
# Or clone this repo
git clone https://github.com/trustlists/trustlists-data.git
Data Format
Each entry in data/trust-centers.json contains:
{
"name": "Stripe",
"website": "https://stripe.com/",
"trustCenter": "https://stripe.com/docs/security",
"platform": "Self-hosted",
"iconUrl": "https://...",
"certifications": ["SOC 2 Type II", "ISO 27001", "PCI DSS Level 1"],
"lastVerified": "2026-04-27"
}
| Field | Type | Description |
|---|---|---|
name |
string | Company name |
website |
string | Company website URL |
trustCenter |
string | Trust center or security page URL |
platform |
string | Trust center platform (Vanta, SafeBase, Drata, etc.) |
iconUrl |
string | Company logo/favicon URL |
certifications |
string[] | Security certifications (optional) |
lastVerified |
string | Last verification date YYYY-MM-DD (optional) |
csaStar |
object | CSA STAR Registry data (optional) |
API Endpoints
| Endpoint | Description |
|---|---|
/api/trust-centers.json |
Full directory of trust centers |
/api/stats.json |
Directory statistics by platform |
No API key required. No rate limits.
Attribution Required
trustlists is free to use under the Apache 2.0 License. In return, we require a visible dofollow link on every page or application that uses this data.
Add this to your footer
<a href="https://trustlists.org">Data by trustlists</a>
Requirements
- ✅ Standard
<a>hyperlink — visible to users, not hidden via CSS - ✅ Dofollow link — no
rel="nofollow",rel="sponsored", orrel="ugc" - ✅ Placed in a visible area: footer, sidebar, or about/credits page
- ✅ Readable anchor text such as "Data by trustlists" or "Powered by trustlists"
⚠️ Non-compliant domains may be blocked without notice.
See the full API documentation for code examples and technical details.
Contributing
We welcome contributions! You can:
- Submit a trust center via trustlists.org/submit
- Report issues via GitHub Issues
- Contribute code to the main repository
Data Updates
This repository is automatically synced from the main trustlists directory. Data is updated:
- Continuously as new trust centers are discovered and submitted
- Bi-weekly for certification data refresh via automated scripts
License
This data is licensed under the Apache License 2.0.
trustlists.org — The open directory for trust centers