Comparison
Trust Prep vs Notice Labs
For a startup without SOC 2, Notice Labs is a full trust center: controls, documents, a subprocessor directory, and intake forms, from £39 a month, with no free plan. Trust Prep is the vendor list alone. $19 a month. Lock it in today. No price increases while you stay subscribed.
The short answer
Pick Notice Labs when the reviewer needs the whole public security page, including controls and documents, and you want that page on your own domain.
Pick Trust Prep when the review is waiting on who touches customer data, you will keep those rows yourself, and you do not need a controls library or a document portal this week.
Notice Labs says you do not need SOC 2 or ISO 27001 before you start. Trust Prep does not need a SOC 2 report either. Neither product is the audit.
Competitor facts on this page are as of October 2026, from the pages linked at the bottom. Trust Prep facts are what the app does today. The pricing page at trustprep.io/pricing showed the same price line on 31 October 2026.
Side by side
| Topic | Notice Labs | Trust Prep |
|---|---|---|
| What you publish | A trust center: security controls, documents, a subprocessor directory, vulnerability disclosure, and privacy requests. | A vendor list: company, what they do, location, agreement link, an Updated date, and a security contact when you save one. |
| Price | Pro is £39 a month, or £425 a year, for one trust center. Enterprise is £349 a month, or £4,000 a year. Prices exclude tax. There is no free plan. | $19 a month. Lock it in today. No price increases while you stay subscribed. There is no free public page. |
| Before a SOC 2 report | Their pricing page says you do not need SOC 2 or ISO 27001 first. Publish the controls and documents you have, and add certifications when they are done. | You can publish the vendor list without a SOC 2 report. The product does not store one. |
| Address you share | Your own domain, on both plans. Their pricing page gives trust.yourcompany.com as the example. | A link on trustprep.io, made from your company name. No custom domain. |
| Subprocessors | Listed on the trust center with what they do and where they process data. Their home page says logos resolve automatically. | The whole product. You enter each row. Nothing is filled in from a provider's own list. |
| Documents and access | Public documents and request-to-access documents. You can revoke an approved link. Enterprise adds NDA acceptance, passwords, and email-domain rules. | No document library and no NDA gate. |
| Telling customers about a change | A visitor can choose Notify me. Their home page says that person gets one update a day when a document, control, compliance status, or subprocessor changes. | Saving a row updates the public list and that row's date. Once the page is public it also keeps a dated change history and shows a How we notify you note you write. Trust Prep does not email customers. |
| Questionnaires | Create can make a DPA template for a lawyer to review, a security overview PDF, and a blank questionnaire for your own vendors. Their home page says it does not answer anyone else's questionnaire. | Does not answer a questionnaire. The guides on this site are wording you paste into your own document. |
What Notice Labs says on its own site
The home page describes trust center software for software companies: one page at your own domain for controls, documents, subprocessors, vulnerability disclosure, and privacy requests. It says setup is an afternoon, without a sales call, and that the product does not connect to your cloud.
The pricing page lists two self-serve plans. Both include every section of the trust center. Pro is one trust center. Enterprise is unlimited trust centers, extra seats, NDA gates, password-protected documents, email-domain access gates, analytics, AI triage for vulnerability reports, the option to turn off Notice Labs attribution, and priority support.
The same pricing page says there is no free plan, prices exclude tax, and Polar adds tax at checkout. A yearly Pro plan is £425. A yearly Enterprise plan is £4,000.
Their billing docs say a trust center with no subscription stays private. It is public while the status is Active, Trial, Past due, or Canceling, and it goes offline when the status is Ended. The pricing page does not advertise a free plan. The billing page does list a Trial status.
What Trust Prep is
Use Trust Prep when Notice Labs is the larger page and the reviewer only asked for the list.
Trust Prep is a hosted vendor list. You paste a list, upload a spreadsheet, or type each company. A row holds the company name, what that company does, a processing location, and an agreement link.
After the page is published, anyone with the link can open it without an account. The page shows an Updated date, a security contact when you have saved one, and the same table a reviewer can copy or download as a spreadsheet.
While you are signed in you can preview the page. That preview is only for you. It is not a link you can send. Copy link and Open page stay off until you publish. Publishing turns on after we confirm your payment.
$19 a month. Lock it in today. No price increases while you stay subscribed.
Trust Prep does not offer a custom domain, an NDA gate, a document library, a controls library, or a vulnerability form. It does not email customers when a vendor changes. It does not read another company's subprocessor list, and it does not answer a security questionnaire.
Who should pick Notice Labs
You want controls, policies, reports, a subprocessor directory, and a way for someone to report a vulnerability or a privacy request on one page.
You want the link on your own domain, and £39 a month before tax is the budget for that whole center.
You want visitors to subscribe to a daily change email, or you need Enterprise controls such as an NDA before a document opens.
You are fine publishing an honest page before the audit, which is the use Notice Labs describes.
Who should pick Trust Prep
The security review keeps coming back to the vendor or subprocessor list, and a controls library would be extra work this week.
You already know the companies. You will paste or type them, and you will edit a row when a tool changes.
You want the reviewer to open one link, copy the table, or download the spreadsheet, with an Updated date and a security contact.
You do not need your own domain, document requests, or a vulnerability form on this product.
Sources checked on 31 October 2026
If the list is the part you need
Why reviewers ask for the list is in the vendor list guide.
A table you can copy is in the subprocessor list template.
A hosted list that also watches upstream vendors is compared in Registora alternatives.
Trust Prep pricing is on the pricing page.
Related guides
Publish the list when that is the ask
If the reviewer is waiting on the vendor list, build that page. If they need the controls and the documents too, use Notice Labs.