> ## Documentation Index > Fetch the complete documentation index at: https://docs.trusset.org/llms.txt > Use this file to discover all available pages before exploring further. # Trusset Security Overview > Learn how Trusset implements industry-leading security standards. ## DORA, ISO, TÜV, GDPR, and Audit Documentation We provide a searchable database of regularly updated compliance documents. Our documents are currently being reviewed by TÜV as part of the final certification process. You can find the database in the [Issuer App](https://issuers.trusset.org/) under "Compliance Data Room". This allows issuers to forward the required infrastructure documentation to their authorities on request, with a full audit trail. ## Incident Management Security incidents are visible and managed on our [status page](https://status.trusset.org/), covering the following services: * Trusset APIs — [api.trusset.org](https://api.trusset.org) * Trusset Issuer App — [issuers.trusset.org](https://issuers.trusset.org) * Trusset Custodian App — [custodians.trusset.org](https://custodians.trusset.org) * Trusset Whitelabel Infrastructure — [app.trusset.org](https://app.trusset.org) ## Secret Management Development and Staging secrets are managed via [Doppler](https://www.doppler.com/). Production secrets are managed via [HashiCorp Vault](https://www.hashicorp.com/products/vault), deployed in a hardened Docker container. ## Contract Updates Trusset cannot update global contracts (e.g. the Identity Register) as a single party. Global contract updates require multisignature approval from the TrussetDAO, consisting of all dedicated issuers in the Trusset ecosystem, and the Trusset Board. ## Audit Policy Once a year, we renew all security audits with a chosen third-party auditor based in the EU, and renew our ISO certification with TÜV. ## App Updates You can find our production app changelogs [here](/security/changelog). Updates undergo a strict, 3-step process that is defined internally and in our compliance documentation.