Changelog
Back to All

Trust Center 1.0.0 Beta

November 9th, 2026

FedRAMP authorization carries ongoing reporting obligations: vulnerability reports, significant change notifications, incident reports, and recurring certification reports, each with its own deadline. The data behind them is sensitive, so providers need a secure system of record for managing these obligations and precise control over who can see what.

RegScale Trust Center 1.0.0 is now available in Beta. For cloud service providers (CSPs) pursuing or maintaining FedRAMP Rev 5 or 20x authorization, Trust Center provides a secure place to manage reporting obligations and share the appropriate view of their authorization data with assessors, customers, and partners.

Availability

Trust Center 1.0.0 is ready for production data, so you can use it with your live FedRAMP information. The Beta designation reflects that many features are in minimum viable product (MVP) form: they support the core workflow from start to finish, with less depth, configuration, and refinement than we plan for general availability. Screens, defaults, and workflows may change before general availability.

Core Capabilities

KSI Management

  • Record the status, narrative, and evidence of each Key Security Indicator (KSI), with completion rolled up by family.
  • Select pre-configured measurement methods from Automation Packs, or write your own. AI-assisted drafting is available when AI is turned on for your organization.
  • Report on completed KSI's in the Trust Portal or Auditor Portal.

FRR Management

  • Under the FedRAMP Consolidated Rules for 2026 (CR26), set each FedRAMP Rule (FRR) that applies to your certification class to Compliant, Partial, Non-Compliant, or Not Applicable, and add a narrative and evidence.
  • Walkthroughs in the application explain each rule family.

VER/VDR Reporting

  • Evaluate vulnerabilities in Core Platform, including each finding's potential agency impact (N1 to N5) rating. Trust Center generates the Vulnerability Evaluation and Reporting (VER) and Vulnerability Detection and Response (VDR) reports and artifacts from that analysis. Track each reporting obligation with its next due date and status.
  • Choose how findings reach Trust Center. Route scanner data through the RegScale Orchestration Hub (ROH) into Core Platform and sync it to Trust Center, or load findings, with their evaluations, directly into Trust Center through its API.
  • Publish the monthly Vulnerability Detail, Accepted Vulnerability Information, and overview reports as a single package, validated against FedRAMP's schemas. Preview each publish before it goes out, and download the published month as a PDF. Historical VER Activity is available as a separate, all-time report.

Rev 5 Artifact Management

  • Import an existing Rev 5 Word SSP, its Appendix A, or an OSCAL JSON SSP. Then maintain control implementations, inventory, POA&Ms, the Customer Responsibility Matrix, and five narrative appendices through guided wizards, with completion tracked in one view.
  • Publish signed OSCAL files and a human-readable SSP from the same source data. A guided workflow supports migrating an existing Rev 5 authorization into Trust Center.

Trust Portal

  • Registration is self-service or by invitation, with an optional NDA. Visitors request document access with a justification. Your team approves with view-only or view-and-download access, or domain rules decide by email domain.
  • Share a system that is not yet visible to everyone with one named viewer, such as a pilot customer.
  • Choose which of the portal's 13 tabs appear, and in what order.

Auditor Portal

  • Invite an assessor firm to audit a system with a defined scope and access window. Assessors see only the systems you enable for them.
  • Assessors record Met or Not met verdicts, raise findings, and request and review evidence.

Customizable UI

  • Use the CR26 Guided Tours to educate your users on how requirements align with capabilities in the application.
  • Use the Hide Features settings to turn off any sidebar or profile-menu items for users in your organization. New tenants start with a core capabilities feature set, with the option to enable additional features at any time.
  • Each FedRAMP system has its own Hide Features setting; new systems start with a focused core set.
  • Apply your branding to the portal for a cohesive user experience.