Sapling

Once you set up your compliance program, TrustCloud TrustOps works to ensure that your systems remain compliant with your adopted controls. To do so, TrustCloud runs automated tests against systems in your product and business stack and verifies that they are properly configured.

This document outlines the steps you can take to grant TrustCloud access to only read metadata about the configuration settings for your Sapling account so that TrustOps can validate and generate evidence for your compliance program.

1. Login to your Sapling instance with Super Admin access.
2. Go to the ‘Integrations’ page of your Sapling account.
3. Create an API key by clicking on the “Create API Key” button. Make sure to provide a descriptive name for the key. e.g., TrustCloud Integration.
4. For security reasons, after you navigate off the ‘Sapling Create Token’ page, you will not be able to see the token again. Make sure you copy it before leaving the page.
5. Record the subdomain for your Sapling instance. You can find it in your application URL as https://{subdomain}.saplingapp.io/
6. Provide the subdomain and API Key in Trust Cloud.