TL;DR
🛡️ Trust Passport = your living readiness graph. MRCC Certificate = signed snapshot you share with auditors.
| 🛡️ Trust Passport | 📜 MRCC Certificate | |
|---|---|---|
| Nature | Living, continuously updated | Snapshot, signed by experts |
| Audience | Internal, prospects, partners | Auditors, regulators, key customers |
| Issuance | Auto from your assessments | Issued at confidence threshold |
| Shareable | Yes (link or embed) | Yes (PDF + verify URL) |
| Plan | Starter+ | Launch+ |
🎯 Which one for which moment?
| You want to… | Use |
|---|---|
| Show readiness on your website footer | 🛡️ Trust Passport |
| Reply to a vendor security questionnaire | 🛡️ Trust Passport + 📜 MRCC excerpt |
| Pass an enterprise customer audit | 📜 MRCC Certificate |
| Demonstrate readiness to a notified body | 📜 MRCC + your own technical file |
| Track your own progress quarter over quarter | 🛡️ Trust Passport (with trend) |
🔗 Together
You always own a Trust Passport first. Once your readiness crosses the threshold for one or more frameworks, you can request the MRCC to be issued as a signed snapshot.
➡️ Next
💬 Need help?
- Reach out via our live chat (bottom-right) — Captain AI replies instantly, human experts within business hours.
- Email support@nexcyber.eu with
[P1]for Command/Strategic priority issues.
ℹ️ Disclaimer — RICE provides a readiness analysis, not legal advice. Final compliance may require legal review or notified body certification.
Last reviewed: 2026-06-02 · NexCyber Help Center