Once your Trust Center's branding is set up, three tabs in the Page Builder handle the actual substance of what you're showing visitors.

Shows the frameworks you're compliant with, in progress on, or planning — each with a status badge (Compliant / In Progress / Coming Soon) and a short blurb you write yourself:

A public-facing summary of your controls, grouped by category (Infrastructure Security, Organizational Security, and so on):

Reports and policies visitors can see — SOC 2 reports, ISO certificates, pen test results, and similar:

Each resource has an Access Level: Private (visitors have to request access — see Reviewing and Approving Trust Center Access Requests) or Public (visible to anyone, no request needed).

Important: this choice locks once a file is attached. Notice both options greyed out below — that's not a bug, it's because this resource already has a PDF uploaded:

Set the access level correctly before uploading the file — once a file is attached, the toggle itself is locked. If you need to change it later, removing the attached file first looks like the way back in, though we haven't confirmed that unlocks it — worth testing on a non-critical resource first, or asking support if you get stuck.