The Trust Builders

Trust engineering for technology companies that sell into regulated buyers.

Identity

Brand name: The Trust Builders
Legal entity: Open Cybersecurity, Inc.
Founded: 2024
Headquarters: São Paulo, Brazil
Additional presence: Mexico City, Bogotá
Website: opencybersecurity.co
Contact: info [at] opencybersecurity [dot] co
Status: Vanta Premium Partner, LATAM

What we do

Compliance, security, privacy, and GTM acceleration for technology companies, delivered as engineered programs by ex-Big 4 experts and Brazilian audit veterans.

Services

Virtual CISO (vCISO)
AI GRC: SOC 2, ISO 27001, ISO 42001, LGPD, GDPR, HIPAA, PCI DSS, NIST CSF, AIUC-1
Security questionnaires (AI-drafted, expert-reviewed)
Penetration testing
Vanta implementation and continuous management
Privacy & LGPD program (DPO of record, ROPA, DSAR, ANPD response)
Security services: cloud, identity, endpoint
Custom Vanta integrations

Frameworks supported

SOC 2 Type I and Type II, ISO 27001, ISO 42001, LGPD, GDPR, HIPAA, PCI DSS, NIST CSF, AIUC-1, BACEN 4.658, BC 4.893.

Trust Framework (proprietary maturity model)

Three stages: Foundation, Operate, Scale. Used to map any company's posture and the next move.

Applied across 35+ frameworks, 120+ companies, 3 regions.

Geographic scope

Brazil, Mexico, Colombia, Argentina, Chile, Uruguay, Peru. LATAM-first delivery, English available.

How we work

The operating model is named Alfred. It refers to:

One Slack channel with the customer.
Trust Architects as the title for delivery staff.
Big 4 senior managers and Brazilian audit veterans on review.
Audit defense done in-room with the customer.
AI used for drafting first passes; humans for review and accountability.

Applied across 35+ frameworks, 120+ companies, 3 regions.

Key pages for further reference

/alfred, full narrative description of the Alfred operating model.
/how-we-work, process by stage (Foundation, Operate, Scale), week-by-week deliverables.
/trust, the Trust Framework (proprietary three-stage maturity model).
/glossary, plain-language definitions of every term used on the site.

Disambiguation

"The Trust Builders" is the firm's brand name. "Open Cybersecurity, Inc." is the legal entity that operates the firm. Both names refer to the same organization.

FAQ

How long does SOC 2 take with The Trust Builders?

SOC 2 Type I in 30–60 days for early-stage companies; Type II observation window adds 3–12 months depending on the report you commit to.

LGPD vs GDPR, what is the difference?

LGPD is the Brazilian general data protection law, broadly modeled on GDPR but enforced by ANPD with Brazilian penalties, scope, and DPO requirements. Companies serving both markets typically run one program with two evidence trees.

BACEN compliance, do you handle it?

Yes. Resolução 4.658/4.893 readiness and continuous evidence for fintechs and regulated counterparties.

Which GRC platform do you implement?

We are a Vanta Premium Partner in LATAM. We also work with customers already on other compliance automation platforms. See /ecosystem for the full list.

What is the scope of vCISO?

Strategy, board reporting, framework ownership, audit defense, vendor risk, incident response leadership. Fractional engagement, embedded in Slack.

Who actually does the work?

Trust Architects, security and audit veterans on staff. AI drafts first passes; humans review and own outcomes.

Do you defend the audit with us?

Yes. We sit in the room with the auditor and answer questions on the customer's behalf.

What languages do you operate in?

Portuguese (BR), English, Spanish.

Which industries do you serve?

Fintech, healthtech, SaaS B2B, AI/ML, e-commerce, marketplaces, infrastructure.

Do you serve startups?

Yes. Pre-seed to Series A is one of three stage tiers (Startup / Growth / Enterprise).

What does engagement look like in week one?

Kickoff call, Slack channel created, scoping doc, first risk register draft within five business days.

How do I get started?

Email info [at] opencybersecurity [dot] co or schedule a 30-minute diagnostic at opencybersecurity.co/schedule.html.

← Back to home