Get a published trust page

GET/v1/public/trust/{slug}

Get a published trust page.

An organization's public trust page, built from its records for the trailing 90 days with only the sections it chose: its sub-processors and their terms, data handling statements, guardrail coverage, sub-processor changes and the approved provider policy. It holds no request counts, volumes, dates seen or tool server hosts. No credentials needed. The page is cached for up to ten minutes, so a change can take that long to show.

Errors: 404 when the slug is unknown, the page is unpublished, or the organization's plan no longer includes publishing.

Authorization

None: this endpoint is public.

Path parameters

slugstringrequired
the page's address, as set in the trust page settings (public_slug); case-insensitive

Responses

200application/json

slugstring
The page's address (public_slug).
display_namestring
The company name shown on the page; the organization slug when none is set.
contact_emailstring
Where a reviewer can ask questions; absent when not set.
indexableboolean
Whether the organization lets search engines index the page.
generated_atstring<date-time>
When the page was built (ISO 8601 date-time). A page can be served from a cache for up to ten minutes.
start_timestring<date-time>
Start of the period the page reports on (ISO 8601 date-time), 90 days before end_time.
end_timestring<date-time>
End of the period the page reports on (ISO 8601 date-time).
sectionsenum<string>[]
The sections shown, in order: SUBPROCESSORS, DATA_HANDLING, GUARDRAILS, CHANGES, POLICY.
subprocessorsobject[]
The sub-processors and their terms; SUBPROCESSORS section only.
Child attributes
- namestring
  The sub-processor's name.
- categoryenum<string>
  What kind of party it is. MODEL_PROVIDER: an AI model provider the requests were sent to. TOOL_SERVER: an upstream MCP server or API called through the MCP Gateway. PLATFORM: a service VectorAxis itself uses to run the gateway (hosting, edge, embeddings, AI guardrail checks).
  One of "MODEL_PROVIDER", "TOOL_SERVER", "PLATFORM"
- usageenum<string>
  OBSERVED: it received the organization's data in the period. CONFIGURED: it is reachable through the organization's configuration (a virtual key, an integration, a guardrail) but received nothing in the period.
  One of "OBSERVED", "CONFIGURED"
- purposesstring[]
  What the data is sent to it for; platform services and tool servers only.
- regionsstring[]
  Regions the data was sent to, where known; absent otherwise.
- legal_entitystring
  The legal entity that processes the data.
- headquartersstring
  ISO country code of the provider's headquarters.
- trains_on_api_databoolean
  Whether the provider trains on API inputs and outputs by default; absent when it does not clearly say.
- api_data_retentionstring
  How long the provider keeps API inputs and outputs, as it states it.
- zero_retentionstring
  Whether and how zero data retention is available, as the provider states it.
- dpa_urlstring
  Link to the provider's data processing agreement.
- terms_urlstring
  Link to the provider's terms of service.
- privacy_urlstring
  Link to the provider's privacy policy.
data_handlingstring[]
Data handling statements as plain sentences; DATA_HANDLING section only.
guardrailsobject
What the guardrails check, as the public trust page shows it.
Child attributes
- checked_percentnumber<double>
  Share of AI requests in the period a guardrail checked.
- pii_types_coveredstring[]
  Personal data types an enabled guardrail redacts or blocks.
- protectionsstring[]
  The checks the enabled guardrails run, by name.
- tool_result_scanstring
  What the tool-result scan does with a suspicious tool result: MONITOR, REDACT or BLOCK; null when off.
changesobject[]
Sub-processor changes in the period, newest first; CHANGES section only.
Child attributes
- detected_atstring<date-time>
  When the change was found (ISO 8601 date-time).
- descriptionstring
  The change as a sentence.
policyobject
The approved provider policy, as the public trust page states it.
Child attributes
- enforcedboolean
  Requests to providers outside the list are refused before they are sent.
- approved_providersstring[]
  Provider names, when enforced.

VectorAxis is built by GK Labs, a member of NVIDIA Inception.