Questions
Straight answers.
What Trusvo does, what it refuses to claim, how your data is handled and how plans work.
The product
What does Trusvo actually do?
It builds an evidence graph from your repositories, configs and policies, drafts answers to a buyer's security questionnaire with citations to that evidence, lets you review and approve them, and exports the buyer's own file filled in — or publishes a trust room.
Which questionnaire formats can I import?
CSV, Excel (.xlsx, .xls), Word (.docx), PDF, Markdown and plain text, or a built-in template. Excel and CSV questionnaires can be returned as the original file with approved answers written in place.
Do I need an AI key?
No. Import, parsing, deterministic extraction, the gap register, exports and the trust room all work without one, and answers can be drafted from your evidence text alone. Self-hosted installations bring their own AI key if they want AI drafting.
Can I try it without my own data?
Yes. Every new workspace can load eight sample files — a security policy, Terraform, CI, Docker and package manifests — and answer a template questionnaire.
Honesty
Do you give us a security score?
No. Trusvo shows which control areas your evidence covers, as a fraction, and which it does not. It never turns that into a grade, a percentage score or a rating.
What stops the AI from making things up?
Every quoted passage is checked against the source text. If a quote is not found, the draft is replaced and marked Unknown. With no verified citation, the answer cannot be Supported.
Is this a certification or an audit?
No. Trusvo organises and cites your evidence. It does not certify, attest or audit, and the framework crosswalk is a readiness view, not a compliance claim.
What happens to questions we cannot evidence?
They are marked Unsupported or Partially supported and become gaps in your readiness register, each with a suggested fix. Nothing unapproved is ever sent.
Your data
Do you train models on our content?
No. Your content is used only to answer your own questions. Zero data retention is requested from the AI provider where it is available.
What about secrets in our repos?
Detected secrets are redacted at ingestion, before storage and before any model call. Variable names can remain as evidence; values never do.
Can we export or delete everything?
Yes. Account owners can download a full export and delete their account from their settings; deletion removes your workspaces and their files.
Can we self-host?
Yes. The whole product runs from a Docker Compose stack inside your own infrastructure, so your code never has to leave it.
Plans and billing
Is the Free plan a trial?
No. It does not expire: one workspace, three questionnaires a month, cited answers, the gap register and a trust room.
What happens if we cancel?
Your plan stays active until the end of the paid period and then moves to Free. Nothing is deleted.
How do limits work for teammates?
Limits follow the plan of the workspace owner. Invited teammates never use their own allowance.
We need self-hosting or a security review of our own.
Email us. Enterprise and self-hosted licences are arranged by email — there is no sales call to book.
Something we did not answer?
Write to us. A person reads every message.