A customer will not sign until security evidence is provided.
We turn requirements and questionnaires into a technical and executive roadmap.
For industrial, technology-intensive and regulated organisations that need to decide what to protect, what to prove and what to do in the next 90 days.
Many companies already have an MSP, cloud provider, endpoint protection, DPO or legal adviser. That helps. It does not always answer the questions that matter to management, customers or auditors.
“The question is not which tool to buy. It is which decision you can defend.”
We turn requirements and questionnaires into a technical and executive roadmap.
We map use cases, data, permissions, agents, vendors and responsibilities.
We review secure-by-design gaps, vulnerabilities, reporting and CRA readiness.
For a customer, investment, architecture, vendor or leadership decision.
For NIS2, ENS, CRA, an audit, a demanding customer or a priority gap.
For AI, agents, software, IoT, OT, telecom or connected products.

If we are not the right fit, we will say so and point you toward the type of provider you likely need.
Every proposal states what we review, what we do not review, what we deliver and what would change the fee.
We start small. Continuity, operations or R&D come only when the evidence justifies them.
TRUST Lab is strongest as an independent layer for decisions, technical assurance and applied R&D. When the work requires continuous operation, formal certification or legal advice, we work with specialists.
Upper-SMEs and mid-market companies with customer, audit, ENS/NIS2 or connected-product triggers.
Cross-border support for supply chains, products, AI and R&D collaborations, usually with local partners where required.
Brazilian companies operating, selling or preparing to enter Europe: AI, connected products, customer evidence and EU requirements.

The value is not promising everything. It is saying clearly what we know, what the evidence shows, which risk matters and what should be contracted, implemented or researched next.
UPCT provides the institutional framework, transfer and research capability.
Senior researchers participate in scoping, conclusions and executive briefing.
Few active engagements. We do not accept work where we do not add an edge.
Spanish, English and Portuguese delivery for Spain, Europe and Brazil.

The first conversation checks fit, urgency and the smallest useful intervention. This is not an emergency channel.
TRUST Lab · UPCT
ELDI Building, Campus Muralla del Mar
30202 Cartagena, Spain
trustlab@upct.es
Positioning, services, limits and representation policy for TRUST Lab in machine-readable format.