Preview the public trust page
/v1/trust/profile/previewPreview the public trust page.
Builds exactly what the public trust page shows, or would show once published, from the current settings and the trailing 90 days: only the chosen sections, and no request counts, volumes, dates seen or tool server hosts. Works whether or not the page is published.
Requires an organization owner or admin (403 otherwise).
Authorization
AuthorizationBearer va_A platform API key (
va_...), created under Settings > API keys. Scoped to an organization or one workspace, with an admin or member role. Used by the management API.
Query parameters
organizationstringrequiredthe organization slug
Responses
slugstringThe page's address (public_slug).
display_namestringThe company name shown on the page; the organization slug when none is set.
contact_emailstringWhere a reviewer can ask questions; absent when not set.
indexablebooleanWhether the organization lets search engines index the page.
generated_atstring<date-time>When the page was built (ISO 8601 date-time). A page can be served from a cache for up to ten minutes.
start_timestring<date-time>Start of the period the page reports on (ISO 8601 date-time), 90 days before end_time.
end_timestring<date-time>End of the period the page reports on (ISO 8601 date-time).
sectionsenum<string>[]The sections shown, in order: SUBPROCESSORS, DATA_HANDLING, GUARDRAILS, CHANGES, POLICY.
subprocessorsobject[]The sub-processors and their terms; SUBPROCESSORS section only.
Child attributes
namestringThe sub-processor's name.
categoryenum<string>What kind of party it is. MODEL_PROVIDER: an AI model provider the requests were sent to. TOOL_SERVER: an upstream MCP server or API called through the MCP Gateway. PLATFORM: a service VectorAxis itself uses to run the gateway (hosting, edge, embeddings, AI guardrail checks).
One of
"MODEL_PROVIDER","TOOL_SERVER","PLATFORM"usageenum<string>OBSERVED: it received the organization's data in the period. CONFIGURED: it is reachable through the organization's configuration (a virtual key, an integration, a guardrail) but received nothing in the period.
One of
"OBSERVED","CONFIGURED"purposesstring[]What the data is sent to it for; platform services and tool servers only.
regionsstring[]Regions the data was sent to, where known; absent otherwise.
legal_entitystringThe legal entity that processes the data.
headquartersstringISO country code of the provider's headquarters.
trains_on_api_databooleanWhether the provider trains on API inputs and outputs by default; absent when it does not clearly say.
api_data_retentionstringHow long the provider keeps API inputs and outputs, as it states it.
zero_retentionstringWhether and how zero data retention is available, as the provider states it.
dpa_urlstringLink to the provider's data processing agreement.
terms_urlstringLink to the provider's terms of service.
privacy_urlstringLink to the provider's privacy policy.
data_handlingstring[]Data handling statements as plain sentences; DATA_HANDLING section only.
guardrailsobjectWhat the guardrails check, as the public trust page shows it.
Child attributes
checked_percentnumber<double>Share of AI requests in the period a guardrail checked.
pii_types_coveredstring[]Personal data types an enabled guardrail redacts or blocks.
protectionsstring[]The checks the enabled guardrails run, by name.
tool_result_scanstringWhat the tool-result scan does with a suspicious tool result: MONITOR, REDACT or BLOCK; null when off.
changesobject[]Sub-processor changes in the period, newest first; CHANGES section only.
Child attributes
detected_atstring<date-time>When the change was found (ISO 8601 date-time).
descriptionstringThe change as a sentence.
policyobjectThe approved provider policy, as the public trust page states it.
Child attributes
enforcedbooleanRequests to providers outside the list are refused before they are sent.
approved_providersstring[]Provider names, when enforced.