Trust documents
The compliance materials WinkPG publishes: attestations, reports and summaries an assessor or a security review asks for. The catalogue is public; the documents themselves require a signed-in developer account, and every download is recorded.
No compliance documents are published yet.
Retrieving a document
Sign in to the portal to download a document. The card states who the document belongs to, when it was published, when it stops being valid and the SHA-256 of the file, so you can verify what you received. A document past its valid-until date is marked expired and is no longer served.