TrustShare (TrustCloud / Kintent)

{
  "id": "trustshare",
  "name": "TrustShare (TrustCloud / Kintent)",
  "tier": "tier1",
  "adapter_status": "implemented",
  "connect_method": "public_rest_2step",
  "auth": "public_token (static SPA cred, reusable across tenants; Origin-keyed)",
  "normalized_coverage": {
    "organizations": true,
    "certifications": true,
    "controls": true,
    "subprocessors": true,
    "documents": true,
    "securityUpdates": true
  },
  "rate_limit": {
    "recommendedRps": 20,
    "maxConcurrency": 20,
    "readCeiling": ">=60rps (no throttle observed; backend.trustcloud.ai flat ~107ms)",
    "mintCeiling": "POST /auth/public/login hard-limits ~4rps (429 at 5+); cache the ~8h token per tenant, re-mint only on 401/expiry, keep concurrent logins <=3/s",
    "limiter": "reads unmetered to 60; login is the bottleneck",
    "penalty": "login 429 (no Retry-After)",
    "backoff": "exponential on 429 (start ~1s) + jitter"
  },
  "stats": {
    "providerId": "trustshare",
    "name": "TrustShare (TrustCloud / Kintent)",
    "adapterStatus": "implemented",
    "organizations": 31,
    "trustCenters": 31,
    "certifications": 81,
    "controls": 4631,
    "subprocessors": 1074,
    "documents": 957,
    "securityUpdates": 47,
    "sources": 31
  }
}

{
  "support_status": "supported",
  "sync_cadence": "daily_full_sync_plus_intraday_updates_when_enabled",
  "rate_limit": {
    "recommendedRps": 20,
    "maxConcurrency": 20,
    "readCeiling": ">=60rps (no throttle observed; backend.trustcloud.ai flat ~107ms)",
    "mintCeiling": "POST /auth/public/login hard-limits ~4rps (429 at 5+); cache the ~8h token per tenant, re-mint only on 401/expiry, keep concurrent logins <=3/s",
    "limiter": "reads unmetered to 60; login is the bottleneck",
    "penalty": "login 429 (no Retry-After)",
    "backoff": "exponential on 429 (start ~1s) + jitter"
  },
  "known_source_count": 32,
  "harvestable_source_count": 27,
  "seed": "seeds/trustshare-backfill-2026-06-11.json"
}

{
  "companies": 31,
  "trust_centers": 31,
  "certifications": 81,
  "controls": 4631,
  "subprocessors": 1074,
  "documents": 957,
  "security_updates": 47,
  "sources": 31
}

{
  "score": 100,
  "score_kind": "bounded_0_to_100_observed_normalized_trust_center_coverage",
  "granularity_tier": "deep_security_posture",
  "observed_capabilities": {
    "trust_centers": true,
    "certifications": true,
    "controls": true,
    "subprocessors": true,
    "documents": true,
    "security_updates": true,
    "provenance": true
  },
  "available_capabilities": [
    "trust_centers",
    "certifications",
    "controls",
    "subprocessors",
    "documents",
    "security_updates",
    "provenance"
  ],
  "missing_capabilities": [],
  "analysis_readiness": {
    "vendor_risk_profile": true,
    "security_questionnaire_evidence": true,
    "subprocessor_monitoring": true,
    "document_inventory": true,
    "compliance_tracking": true,
    "security_advisory_monitoring": true,
    "provenance_audit": true
  },
  "counts": {
    "trust_centers": 31,
    "certifications": 81,
    "controls": 4631,
    "subprocessors": 1074,
    "documents": 957,
    "security_updates": 47,
    "sources": 31
  }
}

{
  "access_profiles": [
    {
      "key": "trustshare_public_token_rest",
      "count": 31
    }
  ],
  "access_levels": [
    {
      "key": "transparent",
      "count": 28
    },
    {
      "key": "private",
      "count": 3
    }
  ],
  "data_access": {
    "certifications": 29,
    "controls": 30,
    "subprocessors": 30,
    "documents": 25,
    "security_updates": 5
  }
}

{
  "rank": 8,
  "segment": "smb_midmarket",
  "owner": "TrustCloud (aka Kintent, 2020 Boston). 'TrustShare' is TrustCloud's public trust-center product",
  "auth": "public_token_2step",
  "connect": {
    "method": "public_rest",
    "apiHost": "backend.trustcloud.ai",
    "step1_login": "POST /auth/public/login with header 'X-Kintent-Auth: Basic {static-baked-in-SPA-cred}' and 'Origin: https://{tenantDomain}' -> {teamId, token} (token = public JWT, type=public, ~8h TTL). Basic cred is the SAME public client for all tenants (baked into the SPA bundle); Origin header keys it to the tenant",
    "step2_data": "GET endpoints with 'X-Kintent-Auth: Bearer {token}' + Origin header",
    "endpoints": [
      "/trustshare/program-content/{programId} (page config, access levels, FAQ)",
      "/teams/{teamId} (org)",
      "/teams/{teamId}/settings",
      "/teams/{teamId}/certifications",
      "/teams/{teamId}/documents",
      "/teams/{teamId}/leaders (key people)",
      "/controls?includeComplianceMapping=true",
      "/vendors (subprocessors)",
      "/policies",
      "/trustshare/notifications (update feed)"
    ],
    "officialApi": null
  },
  "discovery": {
    "cnameTarget": "{handle}.trustshare.com",
    "handleInCname": true,
    "note": "handle in CNAME (e.g. cribl.trustshare.com, netdocuments.trustshare.com); programContentUrl uses {programId-uuid}.trustshare.com form. SPA shows trustcloud_logo + cdn.kintent.com assets",
    "fingerprints": [
      "CNAME *.trustshare.com",
      "backend.trustcloud.ai API calls",
      "cdn.kintent.com assets",
      "trustcloud_logo svg",
      "X-Kintent-Auth header"
    ],
    "channels": [
      "dns_cname_sweep",
      "crt.sh:trustshare.com",
      "builtwith:TrustCloud"
    ]
  },
  "backfill_2026_06_11": {
    "priorKnown": 13,
    "harvestableNow": 27,
    "netNew": 19,
    "netNewFromCommonCrawl": 16,
    "totalKnown": 32,
    "seed": "seeds/trustshare-backfill-2026-06-11.json"
  }
}

{
  "self": "/v1/coverage/providers/trustshare",
  "provider": "/v1/providers/trustshare",
  "companies": "/v1/companies?provider=trustshare",
  "trust_centers": "/v1/trust-centers?provider=trustshare",
  "sources": "/v1/sources?provider=trustshare"
}