# Read your Trust Passport. Before your client does.

> Make, read and share a Trust Passport: the Macs assessed, the since dates, the days not observed and the gaps. What the seal proves and how long a link works.

Page: https://cybee.ai/docs/trust-passport/ (Trust Passport: device evidence and its limits)

- [Documentation](https://cybee.ai/docs/)

- Trust Passport

Trust Passport guide

A Trust Passport is one link your client can check: which protections held on your Macs, since when, and what cybee could not see. Read the dates and the gaps first, then send it.

Proof plan 14 day trial Macs with Apple silicon updated 28.09.2026

**Q:** In this section

Start

- [Overview](https://cybee.ai/docs/)

- [Install cybee](https://cybee.ai/docs/install/)

- [Requirements](https://cybee.ai/docs/requirements/)

- [Your AI assistant](https://cybee.ai/docs/assistant/)

Use

- [Protection and alerts](https://cybee.ai/docs/protection/)

- [Safer settings](https://cybee.ai/docs/hardening/)

- [Trust Passport](https://cybee.ai/docs/trust-passport/)

- [Team devices](https://cybee.ai/docs/team-devices/)

Help

- [Help and support](https://cybee.ai/docs/help/)

- [All questions](https://cybee.ai/faq/)

## Start with the client’s question

Before you open the record, read what the client asked. Which Macs? Which period? A setting that is on today and a setting that has been on all year are two different answers.

| The client asks | What answers it |
|---|---|
| “Is disk encryption on?” | Today’s state of each Mac. |
| “Has it been on this year?” | The since date for each control, and the days cybee observed. |
| “Are all your laptops protected?” | The number of Macs assessed, next to your own list of Macs. |

[Map each question to its evidence](https://cybee.ai/blog/mac-security-questionnaire/#worksheet)

**Q:** What exactly is a Trust Passport?

### The Trust Passport.

The Trust Passport is a dated record of how your Macs are protected. Your client or insurer opens it through one link and sees what holds, since when, and what cybee could not see. It is not a certification or an audit, and it does not answer for your policies, your people or your cloud. It says so on the page.

Sealed means the record carries a fingerprint, a short code made from its content. Your client can compare it with the copy cybee sealed and see whether anything was changed afterwards. That shows the record was not edited. It does not check the facts a second time.

## Make one

1

Ask your AI assistant for the device record.

Name the period the client asked about. Ask to see the Macs assessed, the days not observed and any open findings before anything is shared.

Ask your AI assistant

Prepare the device record for this period. Show the Macs assessed, the days not observed and the open findings before I share it.

2

Fix what you can first.

If a setting is off, fix it before you seal. The owner of that Mac says yes, and the record keeps the time.

3

Seal it, then send the link.

Sealing gives the page its fingerprint and a link you can send. What you send stays exactly as it was sent.

09:41

09:42

09:45

Figure: One gap found, fixed with Mira’s yes, then sealed. Four minutes.

Proof plan

Sealed records are part of the Proof plan: CHF 9 per Mac per month, or 90 a year, excluding tax. To try it for 14 days, ask your AI assistant for a paid feature, such as security training. The Stripe link for the trial arrives in the chat. [How the trial works](https://cybee.ai/pricing/#trial)

## Read it line by line

This is what the client receives. Read it the way they will, from the top.

Figure: One page, dated, with its gap listed.

| On the page | What it tells your client |
|---|---|
| The date and the reason | When the record was sealed, and what it was prepared for. |
| Each number with its total | 4 of 4 Macs, not just 4. A number without its total can hide the Macs that were never checked. |
| The row of days | One square per day. A hollow square is a day cybee did not observe a Mac. |
| The since dates | How long each control has held, such as disk encryption since 12.03.2026. |
| The gaps | What cybee could not see, and what the record does not cover. |
| The fingerprint | The code the reader uses to check that the page has not changed since you sealed it. |

### When a Mac is missing

Say it plainly. A client who asks about eight laptops and gets an answer about seven will notice.

Figure: A fictional team of eight. Share the dates for seven and explain the missing one. A score must not hide how many Macs were assessed.

## What it covers, and what it does not

covered

### The Macs listed on it.

- Protection, and since when

- Disk encryption and screen lock

- App updates

- Browser extensions

- AI tools installed

not covered

### Everything else.

- Your policies, your people, your code

- Backups and suppliers

- Training completion and incident plans

- Any Mac not listed

- Google Workspace, which has its own record

It is not a certification or an audit opinion. The person who receives it decides whether it is enough for what they need.

**Q:** Is it a SOC 2 or ISO 27001 report?

### No. It is the technical part.

A SOC 2 or ISO 27001 programme needs evidence about your devices. The Trust Passport gives that part, from your Macs, with dates. cybee checks each Mac against the CIS Benchmark, a public, industry maintained list of the safest settings for macOS that almost every compliance framework builds on.

Policies, risk, suppliers, people and the audit itself stay with you and your auditor.

118 checks. 10 frameworks, technical controls only.

## What the seal proves

Sealed means locked with a cryptographic fingerprint, so nothing on the page can change afterwards. The reader can compare the page with cybee’s sealed copy and see that it is the one you sent.

What it does not prove

The seal is an integrity check. It is not an independent audit, and it does not say your company is secure.

Before you ask a client to verify a page, email [hello@cybee.ai](mailto:hello@cybee.ai) for the verification steps, so you can pass them on.

**Q:** What is a cryptographic fingerprint?

### A short code made from the page.

It is computed from everything on the page. Change one character and the code comes out different. That is how a reader can tell that the page in front of them is the page you sealed.

In the sample above: sha256 9f3c…b71e.

## Before you send the link

before you send four checks

- Does it cover the Macs and the period the client asked about?

- Are the missing Macs and the days not observed named?

- Is every open finding fixed, or explained in your answer?

- Do you know how long the link will keep working?

### How long a link works

You can revoke a link at any time. You can also ask your AI assistant for an export of your evidence data.

A sealed page never changes, but the link depends on your plan. If the Proof plan ends, no new Passports are sealed, and after the grace period the links you already sent stop working. Ask for the grace period before you rely on a link for a long time. [When the Proof plan ends](https://cybee.ai/pricing/#stops)

[Previous Safer settings](https://cybee.ai/docs/hardening/)[Next Team devices](https://cybee.ai/docs/team-devices/)

On this page

- Start with the client’s question

- Make one

- Read it line by line

- What it covers

- What the seal proves

- Before you send the link