> For the complete documentation index, see [llms.txt](https://doc.dastra.eu/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://doc.dastra.eu/en/features/privacy-hubs/configuration/security.md).

# Security

Learn how to configure Trust center owners, document access control, and IP filtering rules

The Security tab brings together three types of configuration: Trust center owner management, document access control, and IP address filtering.

## Trust center owners

You can designate **one or more owners** for your Trust center. Owners receive document access requests and can approve or decline them from a dedicated screen in the Trust center module.

<figure><img src="https://2697025545-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LvBxs22wUMicv9uWp6C-1972196547%2Fuploads%2FI7QkN1nLzs6ZCD1SarUG%2FCapture%20d'%C3%A9cran%202024-11-18%20235051.png?alt=media&amp;token=c6695436-d58a-4840-9ce8-274b8a659548" alt="Trust center security settings showing owners and document access control"><figcaption><p>Configuring owners and access control in the Security tab</p></figcaption></figure>

## Document access control

By default, an **access confirmation** is required before visitors can download documents published in the Trust center. This behaviour can be configured in the Security section.

When document access control is enabled:

1. Visitors can see the list of available documents, but must submit an **access request** by providing their email address and the reason for their request.
2. Trust center owners receive an email and can **manage access requests** from the administration interface.
3. If the request is approved, the visitor receives an email containing a **download link valid for 30 days**.

{% hint style="info" %}
If no owner is designated, access requests cannot be processed. Make sure at least one active owner is always assigned.
{% endhint %}

## IP address filtering

This section also allows you to define rules that limit access to your Trust center to specific IP ranges. By default, without any IP filtering added by you, your Trust center will be accessible to anyone with the access link, provided that the Trust center is activated.

{% hint style="info" %}
This filtering is **separate** from the organisation-wide [IP filtering](/en/features/settings/ip-filtering.md), which does not apply to the Trust center.
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://doc.dastra.eu/en/features/privacy-hubs/configuration/security.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
