Website audit
Harborflow · 240 prompts tracked · 5 engines
Missing information

No trust or security page despite holding SOC 2 Type II

SOC 2 Type II, SSO and data-residency details appear only in the sales deck and in third-party review text. The site has no security, compliance or trust page.

CriticalIn progressMedium effortDetected Oct 28, 2026

Implementation status

Move this issue through the workflow as work progresses.

  1. ✓
    Pending
  2. ✓
    Needs approval
  3. 3
    In progress
    Current state
  4. 4
    Verification required
  5. 5
    Completed

Why it matters for AI answers

On the compliance prompt, Perplexity says our certifications are 'referenced in third-party reviews but not on its own site' — the engine wants to confirm it and cannot. Nexora Pay's security portal takes the citation instead.

Suggested solution

What to change, specifically

Publish a trust page listing certifications with attestation dates, subprocessors, encryption posture and a report-request path. Mark it up with Organization schema.

Planned as
Build a trust page documenting SOC 2 Type II and data handling — modelled at +7 visibility points, owned by Tom Brennan.

Prompts this issue holds back

3,150 monthly searches affected

Issue detail

Issue id
a-02
Category
Missing information
Severity
Critical
Affected page
/security (does not exist)
Pages affected
1
Effort
Medium effort
Detected
Oct 28, 2026