Update the trust page settings
/v1/trust/profileUpdate the trust page settings.
Changes the public trust page settings; a field left out is unchanged. Publishing makes the page readable by anyone at GET /v1/public/trust/{public_slug} (and in the VectorAxis web app at /trust/{public_slug}). The public page can take up to ten minutes to reflect a change.
Requires an organization owner or admin. Publishing, or changing the address of a published page, needs the Trust Pack controls in the plan; unpublishing never does.
Errors: 400 for a slug that is not 3 to 63 lower-case letters, digits or dashes (not starting or ending with a dash) or is reserved, a display name over 120 characters, an invalid contact email, publishing with no section, or a workspace that is not the organization's; 402 when publishing needs the Trust Pack controls and the plan does not include them; 403 for a caller who is not an organization owner or admin; 409 when another organization already uses the slug.
Authorization
AuthorizationBearer va_A platform API key (
va_...), created under Settings > API keys. Scoped to an organization or one workspace, with an admin or member role. Used by the management API.
Query parameters
organizationstringrequiredthe organization slug
Request body application/json
the fields to change
public_slugstringThe page's address, /trust/{public_slug}: 3 to 63 lower-case letters, digits or dashes, not starting or ending with a dash, and not a reserved word. Must not be in use by another organization.
publishedbooleanTrue makes the page public (needs the Trust Pack controls in the plan and at least one section); false takes it down.
indexablebooleanLet search engines index the published page.
display_namestringThe company name shown on the page, at most 120 characters. An empty string falls back to the organization slug.
contact_emailstringAn email address where a reviewer can ask questions, at most 255 characters; an empty string removes it.
sectionsenum<string>[]The sections to show, in this order (duplicates are dropped). SUBPROCESSORS: the AI providers, tool servers and platform services the data reaches, with their terms. DATA_HANDLING: what VectorAxis keeps of the data, for how long and where. GUARDRAILS: what the guardrails check. CHANGES: sub-processor changes. POLICY: whether only approved providers can receive the data, and which.
workspace_idstringReport on one workspace (its UUID) instead of the whole organization; an empty string means the whole organization. The workspace must belong to the organization.
Responses
organizationstringThe organization slug.
entitledbooleanWhether the organization's plan includes publishing a trust page.
public_slugstringThe page's address: the page is served at GET /v1/public/trust/{public_slug}.
public_pathstringThe page, relative to the VectorAxis web app: /trust/{public_slug}.
publishedbooleanWhether the page is public.
indexablebooleanWhether search engines may index the page.
display_namestringThe company name shown on the page.
contact_emailstringWhere a reviewer can ask questions; absent when not set.
sectionsenum<string>[]The sections the page shows, in order: SUBPROCESSORS, DATA_HANDLING, GUARDRAILS, CHANGES, POLICY. Default for a new page: SUBPROCESSORS, DATA_HANDLING and POLICY.
workspace_idstring<uuid>The workspace the page reports on (UUID); absent for the whole organization.
updated_bystringWho last changed the settings: the user id, or api-key:{key id} for a platform API key; absent before the first change.
updated_atstring<date-time>When the settings were last changed (ISO 8601 date-time); absent before the first change.
published_atstring<date-time>When the page was last published (ISO 8601 date-time); absent while it is unpublished.