Split GraphQL schemas into per-entity files

Split each API's monolithic schema.graphql into per-coredata-model files under graphql/ subdirectories. gqlgen's follow-schema layout with {name}.resolvers.go template generates one resolver file per schema file. Relay uses schema + schemaExtensions to load the split files. Connect API: 8 files (base, session, organization, profile, personal_api_key, saml, scim, audit_log) Trust API: 5 files (base, trust_center, auth, nda, mailing_list) Console API: 25 files covering all domain entities Types extended across files (Organization, Mutation, Viewer, TrustCenter, Identity) are defined in base.graphql as required by Relay's schemaExtensions. Signed-off-by: Émile Ré <emile@getprobo.com>
2026-04-14 17:34:46 +04:00
parent 808fdffc9b
commit 31cca05ca4
87 changed files with 25638 additions and 24800 deletions
--- a/pkg/server/api/trust/v1/base.resolvers.go
+++ b/pkg/server/api/trust/v1/base.resolvers.go
@@ -0,0 +1,526 @@
+package trust_v1
+
+// This file will be automatically regenerated based on the schema, any resolver
+// implementations
+// will be copied through when generating and any unknown code will be moved to the end.
+// Code generated by github.com/99designs/gqlgen version v0.17.87
+
+import (
+	"context"
+	"errors"
+	"strings"
+	"time"
+
+	"go.gearno.de/kit/log"
+	"go.probo.inc/probo/pkg/baseurl"
+	"go.probo.inc/probo/pkg/coredata"
+	"go.probo.inc/probo/pkg/gid"
+	"go.probo.inc/probo/pkg/iam"
+	"go.probo.inc/probo/pkg/page"
+	"go.probo.inc/probo/pkg/saferedirect"
+	"go.probo.inc/probo/pkg/server/api/authn"
+	"go.probo.inc/probo/pkg/server/api/compliancepage"
+	"go.probo.inc/probo/pkg/server/api/trust/v1/schema"
+	"go.probo.inc/probo/pkg/server/api/trust/v1/types"
+	"go.probo.inc/probo/pkg/server/gqlutils"
+	"go.probo.inc/probo/pkg/trust"
+)
+
+// SendMagicLink is the resolver for the sendMagicLink field.
+func (r *mutationResolver) SendMagicLink(ctx context.Context, input types.SendMagicLinkInput) (*types.SendMagicLinkPayload, error) {
+	trustCenter := compliancepage.CompliancePageFromContext(ctx)
+
+	baseURL := compliancepage.CompliancePageBaseURLFromContext(ctx)
+
+	safeRedirect := saferedirect.New(saferedirect.StaticHosts(baseurl.MustParse(*baseURL).Host()))
+
+	if input.Continue != nil {
+		_, ok := safeRedirect.Validate(ctx, *input.Continue)
+		if !ok {
+			return nil, gqlutils.Invalidf(ctx, "invalid continue URL")
+		}
+	}
+
+	req := &iam.SendMagicLinkRequest{
+		Email:            input.Email,
+		CompliancePageID: &trustCenter.ID,
+		OrganizationID:   trustCenter.OrganizationID,
+		URLPath:          "verify-magic-link",
+		Continue:         input.Continue,
+	}
+
+	if err := r.iam.AuthService.SendMagicLink(ctx, req); err != nil {
+		r.logger.ErrorCtx(ctx, "cannot send magic link", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return nil, nil
+}
+
+// VerifyMagicLink is the resolver for the verifyMagicLink field.
+func (r *mutationResolver) VerifyMagicLink(ctx context.Context, input types.VerifyMagicLinkInput) (*types.VerifyMagicLinkPayload, error) {
+	session := authn.SessionFromContext(ctx)
+	identity := authn.IdentityFromContext(ctx)
+
+	email, err := r.iam.AuthService.GetMagicLinkEmail(ctx, input.Token)
+	if err != nil {
+		var errExpiredToken *iam.ErrExpiredToken
+		if errors.As(err, &errExpiredToken) {
+			return nil, gqlutils.Invalid(ctx, err)
+		}
+
+		var errInvalidToken *iam.ErrInvalidToken
+		if errors.As(err, &errInvalidToken) {
+			return nil, gqlutils.Invalid(ctx, err)
+		}
+
+		r.logger.ErrorCtx(ctx, "cannot get magic link email", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	var continueURL *string
+
+	switch {
+	case session == nil:
+		var err error
+		identity, session, continueURL, err = r.iam.AuthService.OpenSessionWithMagicLink(ctx, input.Token)
+		if err != nil {
+			var errExpiredToken *iam.ErrExpiredToken
+			if errors.As(err, &errExpiredToken) {
+				return nil, gqlutils.Invalid(ctx, err)
+			}
+
+			var errInvalidToken *iam.ErrInvalidToken
+			if errors.As(err, &errInvalidToken) {
+				return nil, gqlutils.Invalid(ctx, err)
+			}
+
+			r.logger.ErrorCtx(ctx, "cannot open session with magic link", log.Error(err))
+			return nil, gqlutils.Internal(ctx)
+		}
+	case identity.EmailAddress != email:
+		if err := r.iam.SessionService.CloseSession(ctx, session.ID); err != nil {
+			r.logger.ErrorCtx(ctx, "cannot close session", log.Error(err))
+			return nil, gqlutils.Internal(ctx)
+		}
+
+		var err error
+		identity, session, continueURL, err = r.iam.AuthService.OpenSessionWithMagicLink(ctx, input.Token)
+		if err != nil {
+			var errExpiredToken *iam.ErrExpiredToken
+			if errors.As(err, &errExpiredToken) {
+				return nil, gqlutils.Invalid(ctx, err)
+			}
+
+			var errInvalidToken *iam.ErrInvalidToken
+			if errors.As(err, &errInvalidToken) {
+				return nil, gqlutils.Invalid(ctx, err)
+			}
+
+			r.logger.ErrorCtx(ctx, "cannot open session with magic link", log.Error(err))
+			return nil, gqlutils.Internal(ctx)
+		}
+	}
+
+	trustCenter := compliancepage.CompliancePageFromContext(ctx)
+
+	if _, err := r.trust.ProvisionMember(ctx, trustCenter.ID, identity.ID); err != nil {
+		r.logger.ErrorCtx(ctx, "cannot provision member", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	w := gqlutils.HTTPResponseWriterFromContext(ctx)
+	r.sessionCookie.Set(w, session)
+
+	return &types.VerifyMagicLinkPayload{
+		Continue: continueURL,
+	}, nil
+}
+
+// UpdateFullName is the resolver for the updateFullName field.
+func (r *mutationResolver) UpdateFullName(ctx context.Context, input types.UpdateFullNameInput) (*types.UpdateFullNamePayload, error) {
+	identity := authn.IdentityFromContext(ctx)
+	if identity == nil {
+		return nil, gqlutils.Unauthenticatedf(ctx, "authentication is required to request access")
+	}
+
+	identity, err := r.iam.AccountService.UpdateIdentity(
+		ctx,
+		identity.ID,
+		&iam.UpdateIdentityRequest{
+			FullName: input.FullName,
+		},
+	)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot update identity", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	compliancePage := compliancepage.CompliancePageFromContext(ctx)
+
+	profile, err := r.iam.OrganizationService.GetProfileForIdentityAndOrganization(ctx, identity.ID, compliancePage.OrganizationID)
+	if err != nil {
+		if _, ok := errors.AsType[*iam.ErrProfileNotFound](err); !ok {
+			r.logger.ErrorCtx(ctx, "cannot get profile", log.Error(err))
+			return nil, gqlutils.Internal(ctx)
+		}
+	}
+
+	if profile.Source == coredata.ProfileSourceManual {
+		if _, err := r.iam.OrganizationService.UpdateUser(ctx, &iam.UpdateUserRequest{
+			ID:                       profile.ID,
+			FullName:                 identity.FullName,
+			AdditionalEmailAddresses: profile.AdditionalEmailAddresses,
+			Kind:                     profile.Kind,
+			Position:                 profile.Position,
+			ContractStartDate:        &profile.ContractStartDate,
+			ContractEndDate:          &profile.ContractEndDate,
+		}); err != nil {
+			r.logger.ErrorCtx(ctx, "cannot update profile", log.Error(err))
+			return nil, gqlutils.Internal(ctx)
+		}
+	}
+
+	return &types.UpdateFullNamePayload{Success: true}, nil
+}
+
+// LogoURL is the resolver for the logoUrl field.
+func (r *organizationResolver) LogoURL(ctx context.Context, obj *types.Organization) (*string, error) {
+	trustService := r.TrustService(ctx, obj.ID.TenantID())
+
+	return trustService.Organizations.GenerateLogoURL(ctx, obj.ID, 1*time.Hour)
+}
+
+// Viewer is the resolver for the viewer field.
+func (r *queryResolver) Viewer(ctx context.Context) (*types.Identity, error) {
+	identity := authn.IdentityFromContext(ctx)
+
+	if identity == nil {
+		return nil, nil
+	}
+
+	return &types.Identity{
+		ID:            identity.ID,
+		Email:         identity.EmailAddress,
+		FullName:      identity.FullName,
+		EmailVerified: identity.EmailAddressVerified,
+		CreatedAt:     identity.CreatedAt,
+		UpdatedAt:     identity.UpdatedAt,
+	}, nil
+}
+
+// Node is the resolver for the node field.
+func (r *queryResolver) Node(ctx context.Context, id gid.GID) (types.Node, error) {
+	trustService := r.TrustService(ctx, id.TenantID())
+
+	switch id.EntityType() {
+	case coredata.OrganizationEntityType:
+		organization, err := trustService.Organizations.Get(ctx, id)
+		if err != nil {
+			r.logger.ErrorCtx(ctx, "cannot get organization", log.Error(err))
+			return nil, gqlutils.Internal(ctx)
+		}
+		return types.NewOrganization(organization), nil
+
+	case coredata.DocumentEntityType:
+		trustCenter := compliancepage.CompliancePageFromContext(ctx)
+
+		document, err := trustService.Documents.Get(ctx, trustCenter.OrganizationID, id)
+		if err != nil {
+			if errors.Is(err, trust.ErrDocumentNotFound) || errors.Is(err, trust.ErrDocumentNotVisible) || errors.Is(err, coredata.ErrResourceNotFound) {
+				return nil, gqlutils.NotFoundf(ctx, "node %q not found", id)
+			}
+			if _, ok := errors.AsType[*trust.ErrDocumentArchived](err); ok {
+				return nil, gqlutils.NotFoundf(ctx, "node %q not found", id)
+			}
+			r.logger.ErrorCtx(ctx, "cannot get document", log.Error(err))
+			return nil, gqlutils.Internal(ctx)
+		}
+		return types.NewDocument(document), nil
+
+	case coredata.FrameworkEntityType:
+		framework, err := trustService.Frameworks.Get(ctx, id)
+		if err != nil {
+			r.logger.ErrorCtx(ctx, "cannot get framework", log.Error(err))
+			return nil, gqlutils.Internal(ctx)
+		}
+		return types.NewFramework(framework), nil
+
+	case coredata.ReportEntityType:
+		trustCenter := compliancepage.CompliancePageFromContext(ctx)
+
+		report, err := trustService.Reports.Get(ctx, trustCenter.OrganizationID, id)
+		if err != nil {
+			if errors.Is(err, trust.ErrReportNotFound) || errors.Is(err, coredata.ErrResourceNotFound) {
+				return nil, gqlutils.NotFoundf(ctx, "node %q not found", id)
+			}
+			r.logger.ErrorCtx(ctx, "cannot get report", log.Error(err))
+			return nil, gqlutils.Internal(ctx)
+		}
+		return types.NewReport(report), nil
+
+	case coredata.AuditEntityType:
+		audit, err := trustService.Audits.Get(ctx, id)
+		if err != nil {
+			r.logger.ErrorCtx(ctx, "cannot get audit", log.Error(err))
+			return nil, gqlutils.Internal(ctx)
+		}
+		return types.NewAudit(audit), nil
+
+	case coredata.VendorEntityType:
+		vendor, err := trustService.Vendors.Get(ctx, id)
+		if err != nil {
+			r.logger.ErrorCtx(ctx, "cannot get vendor", log.Error(err))
+			return nil, gqlutils.Internal(ctx)
+		}
+		return types.NewSubprocessor(vendor), nil
+
+	case coredata.TrustCenterEntityType:
+		trustCenter, err := trustService.TrustCenters.Get(ctx, id)
+		if err != nil {
+			r.logger.ErrorCtx(ctx, "cannot get trust center", log.Error(err))
+			return nil, gqlutils.Internal(ctx)
+		}
+		return types.NewTrustCenter(trustCenter), nil
+
+	case coredata.TrustCenterReferenceEntityType:
+		reference, err := trustService.TrustCenterReferences.Get(ctx, id)
+		if err != nil {
+			r.logger.ErrorCtx(ctx, "cannot get trust center reference", log.Error(err))
+			return nil, gqlutils.Internal(ctx)
+		}
+		return types.NewTrustCenterReference(reference), nil
+
+	case coredata.TrustCenterFileEntityType:
+		trustCenter := compliancepage.CompliancePageFromContext(ctx)
+
+		trustCenterFile, err := trustService.TrustCenterFiles.Get(ctx, trustCenter.OrganizationID, id)
+		if err != nil {
+			if errors.Is(err, trust.ErrTrustCenterFileNotFound) || errors.Is(err, trust.ErrTrustCenterFileNotVisible) {
+				return nil, gqlutils.NotFoundf(ctx, "node %q not found", id)
+			}
+			r.logger.ErrorCtx(ctx, "cannot get trust center file", log.Error(err))
+			return nil, gqlutils.Internal(ctx)
+		}
+
+		return types.NewTrustCenterFile(trustCenterFile), nil
+
+	default:
+		return nil, gqlutils.NotFoundf(ctx, "node %q not found", id)
+	}
+}
+
+// CurrentTrustCenter is the resolver for the currentTrustCenter field.
+func (r *queryResolver) CurrentTrustCenter(ctx context.Context) (*types.TrustCenter, error) {
+	trustCenter := compliancepage.CompliancePageFromContext(ctx)
+
+	trustService := r.TrustService(ctx, trustCenter.ID.TenantID())
+
+	org, err := trustService.Organizations.Get(ctx, trustCenter.OrganizationID)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot get organization", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	trustCenter, err = trustService.TrustCenters.Get(ctx, trustCenter.ID)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot get trust center", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	response := types.NewTrustCenter(trustCenter)
+	response.Organization = types.NewOrganization(org)
+
+	return response, nil
+}
+
+// OidcProviders is the resolver for the oidcProviders field.
+func (r *queryResolver) OidcProviders(ctx context.Context) ([]*types.OIDCProviderInfo, error) {
+	providers := r.iam.OIDCService.EnabledProviders()
+	result := make([]*types.OIDCProviderInfo, 0, len(providers))
+
+	for _, p := range providers {
+		name := strings.ToLower(p.String())
+		result = append(result, &types.OIDCProviderInfo{
+			Name:     name,
+			LoginURL: r.baseURL.WithPath("/api/connect/v1/oidc/" + name + "/login").MustString(),
+		})
+	}
+
+	return result, nil
+}
+
+// LogoFileURL is the resolver for the logoFileUrl field.
+func (r *trustCenterResolver) LogoFileURL(ctx context.Context, obj *types.TrustCenter) (*string, error) {
+	trustService := r.TrustService(ctx, obj.ID.TenantID())
+
+	return trustService.TrustCenters.GenerateLogoURL(ctx, obj.ID, 1*time.Hour)
+}
+
+// DarkLogoFileURL is the resolver for the darkLogoFileUrl field.
+func (r *trustCenterResolver) DarkLogoFileURL(ctx context.Context, obj *types.TrustCenter) (*string, error) {
+	trustService := r.TrustService(ctx, obj.ID.TenantID())
+
+	return trustService.TrustCenters.GenerateDarkLogoURL(ctx, obj.ID, 1*time.Hour)
+}
+
+// Organization is the resolver for the organization field.
+func (r *trustCenterResolver) Organization(ctx context.Context, obj *types.TrustCenter) (*types.Organization, error) {
+	return obj.Organization, nil
+}
+
+// Documents is the resolver for the documents field.
+func (r *trustCenterResolver) Documents(ctx context.Context, obj *types.TrustCenter, first *int, after *page.CursorKey, last *int, before *page.CursorKey) (*types.DocumentConnection, error) {
+	trustService := r.TrustService(ctx, obj.ID.TenantID())
+
+	pageOrderBy := page.OrderBy[coredata.DocumentOrderField]{
+		Field:     coredata.DocumentOrderFieldTitle,
+		Direction: page.OrderDirectionAsc,
+	}
+	cursor := types.NewCursor(first, after, last, before, pageOrderBy)
+
+	documentPage, err := trustService.Documents.ListForOrganizationId(ctx, obj.Organization.ID, cursor)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot list public documents", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return types.NewDocumentConnection(documentPage), nil
+}
+
+// Audits is the resolver for the audits field.
+func (r *trustCenterResolver) Audits(ctx context.Context, obj *types.TrustCenter, first *int, after *page.CursorKey, last *int, before *page.CursorKey) (*types.AuditConnection, error) {
+	trustService := r.TrustService(ctx, obj.ID.TenantID())
+
+	pageOrderBy := page.OrderBy[coredata.AuditOrderField]{
+		Field:     coredata.AuditOrderFieldValidFrom,
+		Direction: page.OrderDirectionDesc,
+	}
+	cursor := types.NewCursor(first, after, last, before, pageOrderBy)
+
+	auditPage, err := trustService.Audits.ListForOrganizationId(ctx, obj.Organization.ID, cursor)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot list public audits", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return types.NewAuditConnection(auditPage), nil
+}
+
+// Subprocessors is the resolver for the subprocessors field.
+func (r *trustCenterResolver) Subprocessors(ctx context.Context, obj *types.TrustCenter, first *int, after *page.CursorKey, last *int, before *page.CursorKey) (*types.SubprocessorConnection, error) {
+	trustService := r.TrustService(ctx, obj.ID.TenantID())
+
+	pageOrderBy := page.OrderBy[coredata.VendorOrderField]{
+		Field:     coredata.VendorOrderFieldName,
+		Direction: page.OrderDirectionAsc,
+	}
+	cursor := types.NewCursor(first, after, last, before, pageOrderBy)
+
+	vendorPage, err := trustService.Vendors.ListForOrganizationId(ctx, obj.Organization.ID, cursor)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot list subprocessors", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return types.NewSubprocessorConnection(vendorPage, r, obj.ID), nil
+}
+
+// References is the resolver for the references field.
+func (r *trustCenterResolver) References(ctx context.Context, obj *types.TrustCenter, first *int, after *page.CursorKey, last *int, before *page.CursorKey) (*types.TrustCenterReferenceConnection, error) {
+	trustService := r.TrustService(ctx, obj.ID.TenantID())
+
+	pageOrderBy := page.OrderBy[coredata.TrustCenterReferenceOrderField]{
+		Field:     coredata.TrustCenterReferenceOrderFieldRank,
+		Direction: page.OrderDirectionAsc,
+	}
+	cursor := types.NewCursor(first, after, last, before, pageOrderBy)
+
+	referencePage, err := trustService.TrustCenterReferences.ListForTrustCenterID(ctx, obj.ID, cursor)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot list public trust center references", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return types.NewTrustCenterReferenceConnection(referencePage), nil
+}
+
+// TrustCenterFiles is the resolver for the trustCenterFiles field.
+func (r *trustCenterResolver) TrustCenterFiles(ctx context.Context, obj *types.TrustCenter, first *int, after *page.CursorKey, last *int, before *page.CursorKey) (*types.TrustCenterFileConnection, error) {
+	trustService := r.TrustService(ctx, obj.ID.TenantID())
+
+	pageOrderBy := page.OrderBy[coredata.TrustCenterFileOrderField]{
+		Field:     coredata.TrustCenterFileOrderFieldName,
+		Direction: page.OrderDirectionAsc,
+	}
+	cursor := types.NewCursor(first, after, last, before, pageOrderBy)
+
+	filter := coredata.NewTrustCenterFileFilter(
+		coredata.WithTrustCenterFileVisibilities(
+			coredata.TrustCenterVisibilityPublic,
+			coredata.TrustCenterVisibilityPrivate,
+		),
+	)
+	trustCenterFilePage, err := trustService.TrustCenterFiles.ListForOrganizationId(ctx, obj.Organization.ID, cursor, filter)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot list public trust center files", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return types.NewTrustCenterFileConnection(trustCenterFilePage), nil
+}
+
+// ComplianceFrameworks is the resolver for the complianceFrameworks field.
+func (r *trustCenterResolver) ComplianceFrameworks(ctx context.Context, obj *types.TrustCenter, first *int, after *page.CursorKey, last *int, before *page.CursorKey) (*types.ComplianceFrameworkConnection, error) {
+	trustService := r.TrustService(ctx, obj.ID.TenantID())
+
+	pageOrderBy := page.OrderBy[coredata.ComplianceFrameworkOrderField]{
+		Field:     coredata.ComplianceFrameworkOrderFieldRank,
+		Direction: page.OrderDirectionAsc,
+	}
+	cursor := types.NewCursor(first, after, last, before, pageOrderBy)
+
+	cfPage, err := trustService.ComplianceFrameworks.ListByTrustCenterID(ctx, obj.ID, cursor)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot list compliance frameworks", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return types.NewComplianceFrameworkConnection(cfPage), nil
+}
+
+// ExternalUrls is the resolver for the externalUrls field.
+func (r *trustCenterResolver) ExternalUrls(ctx context.Context, obj *types.TrustCenter, first *int, after *page.CursorKey, last *int, before *page.CursorKey) (*types.ComplianceExternalURLConnection, error) {
+	trustService := r.TrustService(ctx, obj.ID.TenantID())
+
+	pageOrderBy := page.OrderBy[coredata.ComplianceExternalURLOrderField]{
+		Field:     coredata.ComplianceExternalURLOrderFieldRank,
+		Direction: page.OrderDirectionAsc,
+	}
+	cursor := types.NewCursor(first, after, last, before, pageOrderBy)
+
+	result, err := trustService.ComplianceExternalURLs.ListForTrustCenterID(ctx, obj.ID, cursor)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot list compliance external URLs", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return types.NewComplianceExternalURLConnection(result), nil
+}
+
+// Mutation returns schema.MutationResolver implementation.
+func (r *Resolver) Mutation() schema.MutationResolver { return &mutationResolver{r} }
+
+// Organization returns schema.OrganizationResolver implementation.
+func (r *Resolver) Organization() schema.OrganizationResolver { return &organizationResolver{r} }
+
+// Query returns schema.QueryResolver implementation.
+func (r *Resolver) Query() schema.QueryResolver { return &queryResolver{r} }
+
+// TrustCenter returns schema.TrustCenterResolver implementation.
+func (r *Resolver) TrustCenter() schema.TrustCenterResolver { return &trustCenterResolver{r} }
+
+type mutationResolver struct{ *Resolver }
+type organizationResolver struct{ *Resolver }
+type queryResolver struct{ *Resolver }
+type trustCenterResolver struct{ *Resolver }
--- a/pkg/server/api/trust/v1/gqlgen.yaml
+++ b/pkg/server/api/trust/v1/gqlgen.yaml
@@ -1,5 +1,5 @@
 schema:
-  - "schema.graphql"
+  - "graphql/*.graphql"
  - "../../../gqlutils/directives/session/schema.graphql"

 exec:
@@ -14,7 +14,7 @@ resolver:
  layout: "follow-schema"
  dir: "."
  package: "trust_v1"
-  filename_template: "v1_resolver.go"
+  filename_template: "{name}.resolvers.go"

 autobind: []
 call_argument_directives_with_null: true
--- a/pkg/server/api/trust/v1/graphql/auth.graphql
+++ b/pkg/server/api/trust/v1/graphql/auth.graphql
@@ -0,0 +1,24 @@
+input SendMagicLinkInput {
+  email: EmailAddr!
+  continue: String
+}
+
+type SendMagicLinkPayload {
+  success: Boolean!
+}
+
+input VerifyMagicLinkInput {
+  token: String!
+}
+
+type VerifyMagicLinkPayload {
+  continue: String
+}
+
+input UpdateFullNameInput {
+  fullName: String!
+}
+
+type UpdateFullNamePayload {
+  success: Boolean!
+}
--- a/pkg/server/api/trust/v1/graphql/base.graphql
+++ b/pkg/server/api/trust/v1/graphql/base.graphql
@@ -1,4 +1,3 @@
-# Directives
 directive @goField(
  forceResolver: Boolean
  name: String
@@ -49,111 +48,9 @@ type Organization implements Node {
  headquarterAddress: String
 }

-enum DocumentType
-  @goModel(model: "go.probo.inc/probo/pkg/coredata.DocumentType") {
-  OTHER @goEnum(value: "go.probo.inc/probo/pkg/coredata.DocumentTypeOther")
-  GOVERNANCE
-    @goEnum(value: "go.probo.inc/probo/pkg/coredata.DocumentTypeGovernance")
-  POLICY @goEnum(value: "go.probo.inc/probo/pkg/coredata.DocumentTypePolicy")
-  PROCEDURE
-    @goEnum(value: "go.probo.inc/probo/pkg/coredata.DocumentTypeProcedure")
-  PLAN @goEnum(value: "go.probo.inc/probo/pkg/coredata.DocumentTypePlan")
-  REGISTER
-    @goEnum(value: "go.probo.inc/probo/pkg/coredata.DocumentTypeRegister")
-  RECORD @goEnum(value: "go.probo.inc/probo/pkg/coredata.DocumentTypeRecord")
-  REPORT @goEnum(value: "go.probo.inc/probo/pkg/coredata.DocumentTypeReport")
-  TEMPLATE
-    @goEnum(value: "go.probo.inc/probo/pkg/coredata.DocumentTypeTemplate")
-}
-
-type Document implements Node @nda {
-  id: ID!
-  title: String!
-  documentType: DocumentType!
-  isUserAuthorized: Boolean! @goField(forceResolver: true)
-  access: DocumentAccess @goField(forceResolver: true)
-}
-
-type DocumentConnection @nda {
-  edges: [DocumentEdge!]!
-  pageInfo: PageInfo!
-}
-
-type DocumentEdge @nda {
-  cursor: CursorKey!
-  node: Document!
-}
-
-type Framework implements Node @nda {
-  id: ID!
+type OIDCProviderInfo {
  name: String!
-  lightLogoURL: String @goField(forceResolver: true)
-  darkLogoURL: String @goField(forceResolver: true)
-}
-
-type Report implements Node @nda {
-  id: ID!
-  filename: String!
-  isUserAuthorized: Boolean! @goField(forceResolver: true)
-  access: DocumentAccess @goField(forceResolver: true)
-}
-
-type Audit implements Node @nda {
-  id: ID!
-  name: String
-  framework: Framework! @goField(forceResolver: true)
-  report: Report @goField(forceResolver: true)
-}
-
-type AuditConnection @nda {
-  edges: [AuditEdge!]!
-  pageInfo: PageInfo!
-}
-
-type AuditEdge @nda {
-  cursor: CursorKey!
-  node: Audit!
-}
-
-type ComplianceFramework implements Node
-  @goModel(
-    model: "go.probo.inc/probo/pkg/server/api/trust/v1/types.ComplianceFramework"
-  ) {
-  id: ID!
-  framework: Framework! @goField(forceResolver: true)
-}
-
-type ComplianceFrameworkConnection
-  @goModel(
-    model: "go.probo.inc/probo/pkg/server/api/trust/v1/types.ComplianceFrameworkConnection"
-  ) {
-  edges: [ComplianceFrameworkEdge!]!
-  pageInfo: PageInfo!
-}
-
-type ComplianceFrameworkEdge
-  @goModel(
-    model: "go.probo.inc/probo/pkg/server/api/trust/v1/types.ComplianceFrameworkEdge"
-  ) {
-  cursor: CursorKey!
-  node: ComplianceFramework!
-}
-
-type MailingListUpdate implements Node {
-  id: ID!
-  title: String!
-  body: String!
-  updatedAt: Datetime!
-}
-
-type MailingListUpdateConnection {
-  edges: [MailingListUpdateEdge!]!
-  pageInfo: PageInfo!
-}
-
-type MailingListUpdateEdge {
-  cursor: CursorKey!
-  node: MailingListUpdate!
+  loginURL: String!
 }

 enum CountryCode
@@ -409,141 +306,13 @@ enum CountryCode
  ZW @goEnum(value: "go.probo.inc/probo/pkg/coredata.CountryCodeZW")
 }

-enum SubprocessorCategory
-  @goModel(model: "go.probo.inc/probo/pkg/coredata.VendorCategory") {
-  ANALYTICS
-    @goEnum(value: "go.probo.inc/probo/pkg/coredata.VendorCategoryAnalytics")
-  CLOUD_MONITORING
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.VendorCategoryCloudMonitoring"
-    )
-  CLOUD_PROVIDER
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.VendorCategoryCloudProvider"
-    )
-  COLLABORATION
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.VendorCategoryCollaboration"
-    )
-  CUSTOMER_SUPPORT
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.VendorCategoryCustomerSupport"
-    )
-  DATA_STORAGE_AND_PROCESSING
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.VendorCategoryDataStorageAndProcessing"
-    )
-  DOCUMENT_MANAGEMENT
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.VendorCategoryDocumentManagement"
-    )
-  EMPLOYEE_MANAGEMENT
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.VendorCategoryEmployeeManagement"
-    )
-  ENGINEERING
-    @goEnum(value: "go.probo.inc/probo/pkg/coredata.VendorCategoryEngineering")
-  FINANCE
-    @goEnum(value: "go.probo.inc/probo/pkg/coredata.VendorCategoryFinance")
-  IDENTITY_PROVIDER
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.VendorCategoryIdentityProvider"
-    )
-  IT @goEnum(value: "go.probo.inc/probo/pkg/coredata.VendorCategoryIT")
-  MARKETING
-    @goEnum(value: "go.probo.inc/probo/pkg/coredata.VendorCategoryMarketing")
-  OFFICE_OPERATIONS
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.VendorCategoryOfficeOperations"
-    )
-  OTHER @goEnum(value: "go.probo.inc/probo/pkg/coredata.VendorCategoryOther")
-  PASSWORD_MANAGEMENT
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.VendorCategoryPasswordManagement"
-    )
-  PRODUCT_AND_DESIGN
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.VendorCategoryProductAndDesign"
-    )
-  PROFESSIONAL_SERVICES
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.VendorCategoryProfessionalServices"
-    )
-  RECRUITING
-    @goEnum(value: "go.probo.inc/probo/pkg/coredata.VendorCategoryRecruiting")
-  SALES @goEnum(value: "go.probo.inc/probo/pkg/coredata.VendorCategorySales")
-  SECURITY
-    @goEnum(value: "go.probo.inc/probo/pkg/coredata.VendorCategorySecurity")
-  VERSION_CONTROL
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.VendorCategoryVersionControl"
-    )
-}
-
-type Subprocessor implements Node @nda {
-  id: ID!
-  name: String!
-  description: String
-  category: SubprocessorCategory!
-  websiteUrl: String
-  privacyPolicyUrl: String
-  countries: [CountryCode!]!
-}
-
-type SubprocessorConnection
-  @goModel(
-    model: "go.probo.inc/probo/pkg/server/api/trust/v1/types.SubprocessorConnection"
-  ) @nda {
-  edges: [SubprocessorEdge!]!
-  pageInfo: PageInfo!
-  totalCount: Int! @goField(forceResolver: true)
-}
-
-type SubprocessorEdge @nda {
-  cursor: CursorKey!
-  node: Subprocessor!
-}
-
-type TrustCenterReference implements Node @nda {
-  id: ID!
-  name: String!
-  description: String
-  websiteUrl: String!
-  logoUrl: String! @goField(forceResolver: true)
-}
-
-type TrustCenterReferenceConnection @nda {
-  edges: [TrustCenterReferenceEdge!]!
-  pageInfo: PageInfo!
-}
-
-type TrustCenterReferenceEdge @nda {
-  cursor: CursorKey!
-  node: TrustCenterReference!
-}
-
-type TrustCenterFile implements Node @nda {
-  id: ID!
-  name: String!
-  category: String!
-  isUserAuthorized: Boolean! @goField(forceResolver: true)
-  access: DocumentAccess @goField(forceResolver: true)
-}
-
-type TrustCenterFileConnection @nda {
-  edges: [TrustCenterFileEdge!]!
-  pageInfo: PageInfo!
-}
-
-type TrustCenterFileEdge @nda {
-  cursor: CursorKey!
-  node: TrustCenterFile!
-}
-
-type NonDisclosureAgreement {
-  fileName: String!
-  fileUrl: String! @goField(forceResolver: true)
-  viewerSignature: ElectronicSignature @goField(forceResolver: true)
+type Query {
+  viewer: Identity
+  node(id: ID!): Node
+  currentTrustCenter: TrustCenter
+  oidcProviders: [OIDCProviderInfo!]!
+    @goField(forceResolver: true)
+    @session(required: OPTIONAL)
 }

 type TrustCenter implements Node {
@@ -553,9 +322,6 @@ type TrustCenter implements Node {
  logoFileUrl: String @goField(forceResolver: true)
  darkLogoFileUrl: String @goField(forceResolver: true)

-  nonDisclosureAgreement: NonDisclosureAgreement @goField(forceResolver: true)
-
-  viewerSubscription: MailingListSubscriber @goField(forceResolver: true)
  organization: Organization! @goField(forceResolver: true)

  documents(
@@ -606,292 +372,6 @@ type TrustCenter implements Node {
    last: Int
    before: CursorKey
  ): ComplianceExternalURLConnection! @goField(forceResolver: true)
-
-  updates(
-    first: Int
-    after: CursorKey
-    last: Int
-    before: CursorKey
-  ): MailingListUpdateConnection! @goField(forceResolver: true)
-}
-
-type ComplianceExternalURL implements Node {
-  id: ID!
-  name: String!
-  url: String!
-  rank: Int!
-}
-
-type ComplianceExternalURLConnection {
-  edges: [ComplianceExternalURLEdge!]!
-  pageInfo: PageInfo!
-}
-
-type ComplianceExternalURLEdge {
-  cursor: CursorKey!
-  node: ComplianceExternalURL!
-}
-
-type TrustCenterAccess implements Node {
-  id: ID!
-  email: EmailAddr!
-  name: String!
-  createdAt: Datetime!
-  updatedAt: Datetime!
-}
-
-enum DocumentAccessStatus
-  @goModel(
-    model: "go.probo.inc/probo/pkg/coredata.TrustCenterDocumentAccessStatus"
-  ) {
-  REQUESTED
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.TrustCenterDocumentAccessStatusRequested"
-    )
-  GRANTED
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.TrustCenterDocumentAccessStatusGranted"
-    )
-  REJECTED
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.TrustCenterDocumentAccessStatusRejected"
-    )
-  REVOKED
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.TrustCenterDocumentAccessStatusRevoked"
-    )
-}
-
-type DocumentAccess implements Node {
-  id: ID!
-  status: DocumentAccessStatus!
-}
-
-input SendMagicLinkInput {
-  email: EmailAddr!
-  continue: String
-}
-
-type SendMagicLinkPayload {
-  success: Boolean!
-}
-
-input VerifyMagicLinkInput {
-  token: String!
-}
-
-type VerifyMagicLinkPayload {
-  continue: String
-}
-
-input UpdateFullNameInput {
-  fullName: String!
-}
-
-type UpdateFullNamePayload {
-  success: Boolean!
-}
-
-type RequestDocumentAccessPayload {
-  document: Document
-}
-
-type RequestReportAccessPayload {
-  audit: Audit
-}
-
-type RequestFileAccessPayload {
-  file: TrustCenterFile
-}
-
-type RequestAccessesPayload {
-  trustCenterAccess: TrustCenterAccess!
-}
-
-input ExportDocumentPDFInput {
-  documentId: ID!
-}
-
-input ExportReportPDFInput {
-  reportId: ID!
-}
-
-input RequestDocumentAccessInput {
-  documentId: ID!
-}
-
-input RequestReportAccessInput {
-  reportId: ID!
-}
-
-input RequestTrustCenterFileAccessInput {
-  trustCenterFileId: ID!
-}
-
-input ExportTrustCenterFileInput {
-  trustCenterFileId: ID!
-}
-
-type ExportDocumentPDFPayload {
-  data: String!
-}
-
-type ExportReportPDFPayload {
-  data: String!
-}
-
-type ExportTrustCenterFilePayload {
-  data: String!
-}
-
-# Electronic Signature
-
-enum ElectronicSignatureStatus
-  @goModel(
-    model: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureStatus"
-  ) {
-  PENDING
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureStatusPending"
-    )
-  ACCEPTED
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureStatusAccepted"
-    )
-  PROCESSING
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureStatusProcessing"
-    )
-  COMPLETED
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureStatusCompleted"
-    )
-  FAILED
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureStatusFailed"
-    )
-}
-
-enum ElectronicSignatureDocumentType
-  @goModel(
-    model: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureDocumentType"
-  ) {
-  NDA
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureDocumentTypeNDA"
-    )
-  DPA
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureDocumentTypeDPA"
-    )
-  MSA
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureDocumentTypeMSA"
-    )
-  SOW
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureDocumentTypeSOW"
-    )
-  SLA
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureDocumentTypeSLA"
-    )
-  TOS
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureDocumentTypeTOS"
-    )
-  PRIVACY_POLICY
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureDocumentTypePrivacyPolicy"
-    )
-  OTHER
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureDocumentTypeOther"
-    )
-}
-
-enum ElectronicSignatureEventType
-  @goModel(
-    model: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventType"
-  ) {
-  DOCUMENT_VIEWED
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventTypeDocumentViewed"
-    )
-  CONSENT_GIVEN
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventTypeConsentGiven"
-    )
-  FULL_NAME_TYPED
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventTypeFullNameTyped"
-    )
-  SIGNATURE_ACCEPTED
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventTypeSignatureAccepted"
-    )
-  SIGNATURE_COMPLETED
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventTypeSignatureCompleted"
-    )
-  SEAL_COMPUTED
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventTypeSealComputed"
-    )
-  TIMESTAMP_REQUESTED
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventTypeTimestampRequested"
-    )
-  CERTIFICATE_GENERATED
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventTypeCertificateGenerated"
-    )
-  PROCESSING_ERROR
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventTypeProcessingError"
-    )
-}
-
-type ElectronicSignature implements Node {
-  id: ID!
-  status: ElectronicSignatureStatus!
-  documentType: ElectronicSignatureDocumentType!
-  consentText: String!
-  lastError: String
-  signedAt: Datetime
-  createdAt: Datetime!
-  updatedAt: Datetime!
-}
-
-input AcceptElectronicSignatureInput {
-  signatureId: ID!
-}
-
-type AcceptElectronicSignaturePayload {
-  signature: ElectronicSignature!
-}
-
-input RecordSigningEventInput {
-  signatureId: ID!
-  eventType: ElectronicSignatureEventType!
-}
-
-type RecordSigningEventPayload {
-  success: Boolean!
-}
-
-type OIDCProviderInfo {
-  name: String!
-  loginURL: String!
-}
-
-type Query {
-  viewer: Identity
-  node(id: ID!): Node
-  currentTrustCenter: TrustCenter
-  oidcProviders: [OIDCProviderInfo!]!
-    @goField(forceResolver: true)
-    @session(required: OPTIONAL)
 }

 type Mutation {
@@ -901,74 +381,4 @@ type Mutation {
    @session(required: OPTIONAL)
  updateFullName(input: UpdateFullNameInput!): UpdateFullNamePayload
    @session(required: PRESENT)
-
-  requestAllAccesses: RequestAccessesPayload! @session(required: PRESENT) @nda
-
-  exportDocumentPDF(input: ExportDocumentPDFInput!): ExportDocumentPDFPayload!
-    @session(required: OPTIONAL) @nda
-
-  exportReportPDF(input: ExportReportPDFInput!): ExportReportPDFPayload!
-    @session(required: OPTIONAL) @nda
-
-  exportTrustCenterFile(
-    input: ExportTrustCenterFileInput!
-  ): ExportTrustCenterFilePayload! @session(required: OPTIONAL) @nda
-
-  requestDocumentAccess(
-    input: RequestDocumentAccessInput!
-  ): RequestDocumentAccessPayload! @session(required: PRESENT) @nda
-
-  requestReportAccess(
-    input: RequestReportAccessInput!
-  ): RequestReportAccessPayload! @session(required: PRESENT) @nda
-
-  requestTrustCenterFileAccess(
-    input: RequestTrustCenterFileAccessInput!
-  ): RequestFileAccessPayload! @session(required: PRESENT) @nda
-
-  acceptElectronicSignature(
-    input: AcceptElectronicSignatureInput!
-  ): AcceptElectronicSignaturePayload @session(required: PRESENT)
-
-  recordSigningEvent(
-    input: RecordSigningEventInput!
-  ): RecordSigningEventPayload @session(required: PRESENT)
-
-  subscribeToMailingList: SubscribeToMailingListPayload! @session(required: PRESENT)
-
-  unsubscribeFromMailingList: UnsubscribeFromMailingListPayload! @session(required: PRESENT)
-}
-
-type SubscribeToMailingListPayload {
-  subscription: MailingListSubscriber!
-}
-
-type UnsubscribeFromMailingListPayload {
-  deletedMailingListSubscriberId: ID
-}
-
-enum MailingListSubscriberStatus
-  @goModel(
-    model: "go.probo.inc/probo/pkg/coredata.MailingListSubscriberStatus"
-  ) {
-  PENDING
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.MailingListSubscriberStatusPending"
-    )
-  CONFIRMED
-    @goEnum(
-      value: "go.probo.inc/probo/pkg/coredata.MailingListSubscriberStatusConfirmed"
-    )
-}
-
-type MailingListSubscriber implements Node
-  @goModel(
-    model: "go.probo.inc/probo/pkg/server/api/trust/v1/types.MailingListSubscriber"
-  ) {
-  id: ID!
-  fullName: String!
-  email: EmailAddr!
-  status: MailingListSubscriberStatus!
-  createdAt: Datetime!
-  updatedAt: Datetime!
 }
--- a/pkg/server/api/trust/v1/graphql/mailing_list.graphql
+++ b/pkg/server/api/trust/v1/graphql/mailing_list.graphql
@@ -0,0 +1,67 @@
+extend type TrustCenter {
+  viewerSubscription: MailingListSubscriber @goField(forceResolver: true)
+
+  updates(
+    first: Int
+    after: CursorKey
+    last: Int
+    before: CursorKey
+  ): MailingListUpdateConnection! @goField(forceResolver: true)
+}
+
+type MailingListUpdate implements Node {
+  id: ID!
+  title: String!
+  body: String!
+  updatedAt: Datetime!
+}
+
+type MailingListUpdateConnection {
+  edges: [MailingListUpdateEdge!]!
+  pageInfo: PageInfo!
+}
+
+type MailingListUpdateEdge {
+  cursor: CursorKey!
+  node: MailingListUpdate!
+}
+
+enum MailingListSubscriberStatus
+  @goModel(
+    model: "go.probo.inc/probo/pkg/coredata.MailingListSubscriberStatus"
+  ) {
+  PENDING
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.MailingListSubscriberStatusPending"
+    )
+  CONFIRMED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.MailingListSubscriberStatusConfirmed"
+    )
+}
+
+type MailingListSubscriber implements Node
+  @goModel(
+    model: "go.probo.inc/probo/pkg/server/api/trust/v1/types.MailingListSubscriber"
+  ) {
+  id: ID!
+  fullName: String!
+  email: EmailAddr!
+  status: MailingListSubscriberStatus!
+  createdAt: Datetime!
+  updatedAt: Datetime!
+}
+
+extend type Mutation {
+  subscribeToMailingList: SubscribeToMailingListPayload! @session(required: PRESENT)
+
+  unsubscribeFromMailingList: UnsubscribeFromMailingListPayload! @session(required: PRESENT)
+}
+
+type SubscribeToMailingListPayload {
+  subscription: MailingListSubscriber!
+}
+
+type UnsubscribeFromMailingListPayload {
+  deletedMailingListSubscriberId: ID
+}
--- a/pkg/server/api/trust/v1/graphql/nda.graphql
+++ b/pkg/server/api/trust/v1/graphql/nda.graphql
@@ -0,0 +1,153 @@
+extend type TrustCenter {
+  nonDisclosureAgreement: NonDisclosureAgreement @goField(forceResolver: true)
+}
+
+type NonDisclosureAgreement {
+  fileName: String!
+  fileUrl: String! @goField(forceResolver: true)
+  viewerSignature: ElectronicSignature @goField(forceResolver: true)
+}
+
+enum ElectronicSignatureStatus
+  @goModel(
+    model: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureStatus"
+  ) {
+  PENDING
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureStatusPending"
+    )
+  ACCEPTED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureStatusAccepted"
+    )
+  PROCESSING
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureStatusProcessing"
+    )
+  COMPLETED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureStatusCompleted"
+    )
+  FAILED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureStatusFailed"
+    )
+}
+
+enum ElectronicSignatureDocumentType
+  @goModel(
+    model: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureDocumentType"
+  ) {
+  NDA
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureDocumentTypeNDA"
+    )
+  DPA
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureDocumentTypeDPA"
+    )
+  MSA
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureDocumentTypeMSA"
+    )
+  SOW
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureDocumentTypeSOW"
+    )
+  SLA
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureDocumentTypeSLA"
+    )
+  TOS
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureDocumentTypeTOS"
+    )
+  PRIVACY_POLICY
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureDocumentTypePrivacyPolicy"
+    )
+  OTHER
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureDocumentTypeOther"
+    )
+}
+
+enum ElectronicSignatureEventType
+  @goModel(
+    model: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventType"
+  ) {
+  DOCUMENT_VIEWED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventTypeDocumentViewed"
+    )
+  CONSENT_GIVEN
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventTypeConsentGiven"
+    )
+  FULL_NAME_TYPED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventTypeFullNameTyped"
+    )
+  SIGNATURE_ACCEPTED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventTypeSignatureAccepted"
+    )
+  SIGNATURE_COMPLETED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventTypeSignatureCompleted"
+    )
+  SEAL_COMPUTED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventTypeSealComputed"
+    )
+  TIMESTAMP_REQUESTED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventTypeTimestampRequested"
+    )
+  CERTIFICATE_GENERATED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventTypeCertificateGenerated"
+    )
+  PROCESSING_ERROR
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.ElectronicSignatureEventTypeProcessingError"
+    )
+}
+
+type ElectronicSignature implements Node {
+  id: ID!
+  status: ElectronicSignatureStatus!
+  documentType: ElectronicSignatureDocumentType!
+  consentText: String!
+  lastError: String
+  signedAt: Datetime
+  createdAt: Datetime!
+  updatedAt: Datetime!
+}
+
+extend type Mutation {
+  acceptElectronicSignature(
+    input: AcceptElectronicSignatureInput!
+  ): AcceptElectronicSignaturePayload @session(required: PRESENT)
+
+  recordSigningEvent(
+    input: RecordSigningEventInput!
+  ): RecordSigningEventPayload @session(required: PRESENT)
+}
+
+input AcceptElectronicSignatureInput {
+  signatureId: ID!
+}
+
+type AcceptElectronicSignaturePayload {
+  signature: ElectronicSignature!
+}
+
+input RecordSigningEventInput {
+  signatureId: ID!
+  eventType: ElectronicSignatureEventType!
+}
+
+type RecordSigningEventPayload {
+  success: Boolean!
+}
--- a/pkg/server/api/trust/v1/graphql/trust_center.graphql
+++ b/pkg/server/api/trust/v1/graphql/trust_center.graphql
@@ -0,0 +1,350 @@
+enum DocumentType
+  @goModel(model: "go.probo.inc/probo/pkg/coredata.DocumentType") {
+  OTHER @goEnum(value: "go.probo.inc/probo/pkg/coredata.DocumentTypeOther")
+  GOVERNANCE
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.DocumentTypeGovernance")
+  POLICY @goEnum(value: "go.probo.inc/probo/pkg/coredata.DocumentTypePolicy")
+  PROCEDURE
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.DocumentTypeProcedure")
+  PLAN @goEnum(value: "go.probo.inc/probo/pkg/coredata.DocumentTypePlan")
+  REGISTER
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.DocumentTypeRegister")
+  RECORD @goEnum(value: "go.probo.inc/probo/pkg/coredata.DocumentTypeRecord")
+  REPORT @goEnum(value: "go.probo.inc/probo/pkg/coredata.DocumentTypeReport")
+  TEMPLATE
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.DocumentTypeTemplate")
+}
+
+type Document implements Node @nda {
+  id: ID!
+  title: String!
+  documentType: DocumentType!
+  isUserAuthorized: Boolean! @goField(forceResolver: true)
+  access: DocumentAccess @goField(forceResolver: true)
+}
+
+type DocumentConnection @nda {
+  edges: [DocumentEdge!]!
+  pageInfo: PageInfo!
+}
+
+type DocumentEdge @nda {
+  cursor: CursorKey!
+  node: Document!
+}
+
+type Framework implements Node @nda {
+  id: ID!
+  name: String!
+  lightLogoURL: String @goField(forceResolver: true)
+  darkLogoURL: String @goField(forceResolver: true)
+}
+
+type Report implements Node @nda {
+  id: ID!
+  filename: String!
+  isUserAuthorized: Boolean! @goField(forceResolver: true)
+  access: DocumentAccess @goField(forceResolver: true)
+}
+
+type Audit implements Node @nda {
+  id: ID!
+  name: String
+  framework: Framework! @goField(forceResolver: true)
+  report: Report @goField(forceResolver: true)
+}
+
+type AuditConnection @nda {
+  edges: [AuditEdge!]!
+  pageInfo: PageInfo!
+}
+
+type AuditEdge @nda {
+  cursor: CursorKey!
+  node: Audit!
+}
+
+type ComplianceFramework implements Node
+  @goModel(
+    model: "go.probo.inc/probo/pkg/server/api/trust/v1/types.ComplianceFramework"
+  ) {
+  id: ID!
+  framework: Framework! @goField(forceResolver: true)
+}
+
+type ComplianceFrameworkConnection
+  @goModel(
+    model: "go.probo.inc/probo/pkg/server/api/trust/v1/types.ComplianceFrameworkConnection"
+  ) {
+  edges: [ComplianceFrameworkEdge!]!
+  pageInfo: PageInfo!
+}
+
+type ComplianceFrameworkEdge
+  @goModel(
+    model: "go.probo.inc/probo/pkg/server/api/trust/v1/types.ComplianceFrameworkEdge"
+  ) {
+  cursor: CursorKey!
+  node: ComplianceFramework!
+}
+
+enum SubprocessorCategory
+  @goModel(model: "go.probo.inc/probo/pkg/coredata.VendorCategory") {
+  ANALYTICS
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.VendorCategoryAnalytics")
+  CLOUD_MONITORING
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.VendorCategoryCloudMonitoring"
+    )
+  CLOUD_PROVIDER
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.VendorCategoryCloudProvider"
+    )
+  COLLABORATION
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.VendorCategoryCollaboration"
+    )
+  CUSTOMER_SUPPORT
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.VendorCategoryCustomerSupport"
+    )
+  DATA_STORAGE_AND_PROCESSING
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.VendorCategoryDataStorageAndProcessing"
+    )
+  DOCUMENT_MANAGEMENT
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.VendorCategoryDocumentManagement"
+    )
+  EMPLOYEE_MANAGEMENT
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.VendorCategoryEmployeeManagement"
+    )
+  ENGINEERING
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.VendorCategoryEngineering")
+  FINANCE
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.VendorCategoryFinance")
+  IDENTITY_PROVIDER
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.VendorCategoryIdentityProvider"
+    )
+  IT @goEnum(value: "go.probo.inc/probo/pkg/coredata.VendorCategoryIT")
+  MARKETING
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.VendorCategoryMarketing")
+  OFFICE_OPERATIONS
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.VendorCategoryOfficeOperations"
+    )
+  OTHER @goEnum(value: "go.probo.inc/probo/pkg/coredata.VendorCategoryOther")
+  PASSWORD_MANAGEMENT
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.VendorCategoryPasswordManagement"
+    )
+  PRODUCT_AND_DESIGN
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.VendorCategoryProductAndDesign"
+    )
+  PROFESSIONAL_SERVICES
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.VendorCategoryProfessionalServices"
+    )
+  RECRUITING
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.VendorCategoryRecruiting")
+  SALES @goEnum(value: "go.probo.inc/probo/pkg/coredata.VendorCategorySales")
+  SECURITY
+    @goEnum(value: "go.probo.inc/probo/pkg/coredata.VendorCategorySecurity")
+  VERSION_CONTROL
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.VendorCategoryVersionControl"
+    )
+}
+
+type Subprocessor implements Node @nda {
+  id: ID!
+  name: String!
+  description: String
+  category: SubprocessorCategory!
+  websiteUrl: String
+  privacyPolicyUrl: String
+  countries: [CountryCode!]!
+}
+
+type SubprocessorConnection
+  @goModel(
+    model: "go.probo.inc/probo/pkg/server/api/trust/v1/types.SubprocessorConnection"
+  ) @nda {
+  edges: [SubprocessorEdge!]!
+  pageInfo: PageInfo!
+  totalCount: Int! @goField(forceResolver: true)
+}
+
+type SubprocessorEdge @nda {
+  cursor: CursorKey!
+  node: Subprocessor!
+}
+
+type TrustCenterReference implements Node @nda {
+  id: ID!
+  name: String!
+  description: String
+  websiteUrl: String!
+  logoUrl: String! @goField(forceResolver: true)
+}
+
+type TrustCenterReferenceConnection @nda {
+  edges: [TrustCenterReferenceEdge!]!
+  pageInfo: PageInfo!
+}
+
+type TrustCenterReferenceEdge @nda {
+  cursor: CursorKey!
+  node: TrustCenterReference!
+}
+
+type TrustCenterFile implements Node @nda {
+  id: ID!
+  name: String!
+  category: String!
+  isUserAuthorized: Boolean! @goField(forceResolver: true)
+  access: DocumentAccess @goField(forceResolver: true)
+}
+
+type TrustCenterFileConnection @nda {
+  edges: [TrustCenterFileEdge!]!
+  pageInfo: PageInfo!
+}
+
+type TrustCenterFileEdge @nda {
+  cursor: CursorKey!
+  node: TrustCenterFile!
+}
+
+type ComplianceExternalURL implements Node {
+  id: ID!
+  name: String!
+  url: String!
+  rank: Int!
+}
+
+type ComplianceExternalURLConnection {
+  edges: [ComplianceExternalURLEdge!]!
+  pageInfo: PageInfo!
+}
+
+type ComplianceExternalURLEdge {
+  cursor: CursorKey!
+  node: ComplianceExternalURL!
+}
+
+type TrustCenterAccess implements Node {
+  id: ID!
+  email: EmailAddr!
+  name: String!
+  createdAt: Datetime!
+  updatedAt: Datetime!
+}
+
+enum DocumentAccessStatus
+  @goModel(
+    model: "go.probo.inc/probo/pkg/coredata.TrustCenterDocumentAccessStatus"
+  ) {
+  REQUESTED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.TrustCenterDocumentAccessStatusRequested"
+    )
+  GRANTED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.TrustCenterDocumentAccessStatusGranted"
+    )
+  REJECTED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.TrustCenterDocumentAccessStatusRejected"
+    )
+  REVOKED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.TrustCenterDocumentAccessStatusRevoked"
+    )
+}
+
+type DocumentAccess implements Node {
+  id: ID!
+  status: DocumentAccessStatus!
+}
+
+extend type Mutation {
+  requestAllAccesses: RequestAccessesPayload! @session(required: PRESENT) @nda
+
+  exportDocumentPDF(input: ExportDocumentPDFInput!): ExportDocumentPDFPayload!
+    @session(required: OPTIONAL) @nda
+
+  exportReportPDF(input: ExportReportPDFInput!): ExportReportPDFPayload!
+    @session(required: OPTIONAL) @nda
+
+  exportTrustCenterFile(
+    input: ExportTrustCenterFileInput!
+  ): ExportTrustCenterFilePayload! @session(required: OPTIONAL) @nda
+
+  requestDocumentAccess(
+    input: RequestDocumentAccessInput!
+  ): RequestDocumentAccessPayload! @session(required: PRESENT) @nda
+
+  requestReportAccess(
+    input: RequestReportAccessInput!
+  ): RequestReportAccessPayload! @session(required: PRESENT) @nda
+
+  requestTrustCenterFileAccess(
+    input: RequestTrustCenterFileAccessInput!
+  ): RequestFileAccessPayload! @session(required: PRESENT) @nda
+}
+
+type RequestDocumentAccessPayload {
+  document: Document
+}
+
+type RequestReportAccessPayload {
+  audit: Audit
+}
+
+type RequestFileAccessPayload {
+  file: TrustCenterFile
+}
+
+type RequestAccessesPayload {
+  trustCenterAccess: TrustCenterAccess!
+}
+
+input ExportDocumentPDFInput {
+  documentId: ID!
+}
+
+input ExportReportPDFInput {
+  reportId: ID!
+}
+
+input RequestDocumentAccessInput {
+  documentId: ID!
+}
+
+input RequestReportAccessInput {
+  reportId: ID!
+}
+
+input RequestTrustCenterFileAccessInput {
+  trustCenterFileId: ID!
+}
+
+input ExportTrustCenterFileInput {
+  trustCenterFileId: ID!
+}
+
+type ExportDocumentPDFPayload {
+  data: String!
+}
+
+type ExportReportPDFPayload {
+  data: String!
+}
+
+type ExportTrustCenterFilePayload {
+  data: String!
+}
--- a/pkg/server/api/trust/v1/mailing_list.resolvers.go
+++ b/pkg/server/api/trust/v1/mailing_list.resolvers.go
@@ -0,0 +1,137 @@
+package trust_v1
+
+// This file will be automatically regenerated based on the schema, any resolver
+// implementations
+// will be copied through when generating and any unknown code will be moved to the end.
+// Code generated by github.com/99designs/gqlgen version v0.17.87
+
+import (
+	"context"
+	"errors"
+
+	"go.gearno.de/kit/log"
+	"go.probo.inc/probo/pkg/coredata"
+	"go.probo.inc/probo/pkg/mailman"
+	"go.probo.inc/probo/pkg/page"
+	"go.probo.inc/probo/pkg/server/api/authn"
+	"go.probo.inc/probo/pkg/server/api/compliancepage"
+	"go.probo.inc/probo/pkg/server/api/trust/v1/types"
+	"go.probo.inc/probo/pkg/server/gqlutils"
+	"go.probo.inc/probo/pkg/validator"
+)
+
+// SubscribeToMailingList is the resolver for the subscribeToMailingList field.
+func (r *mutationResolver) SubscribeToMailingList(ctx context.Context) (*types.SubscribeToMailingListPayload, error) {
+	trustCenter := compliancepage.CompliancePageFromContext(ctx)
+	if trustCenter.MailingListID == nil {
+		return nil, gqlutils.NotFoundf(ctx, "mailing list not found")
+	}
+
+	identity := authn.IdentityFromContext(ctx)
+
+	subscriber, err := r.mailman.CreateSubscriber(
+		ctx,
+		&mailman.CreateSubscriberRequest{
+			MailingListID: *trustCenter.MailingListID,
+			Email:         identity.EmailAddress,
+			FullName:      identity.FullName,
+		},
+	)
+	if err != nil {
+		if validationErrors, ok := errors.AsType[validator.ValidationErrors](err); ok {
+			return nil, gqlutils.InvalidValidationErrors(ctx, validationErrors)
+		}
+		if errors.Is(err, mailman.ErrSubscriberAlreadyExist) {
+			return nil, gqlutils.Conflictf(ctx, "already subscribed to this mailing list")
+		}
+		r.logger.ErrorCtx(ctx, "cannot subscribe to mailing list", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return &types.SubscribeToMailingListPayload{
+		Subscription: types.NewMailingListSubscriber(subscriber),
+	}, nil
+}
+
+// UnsubscribeFromMailingList is the resolver for the unsubscribeFromMailingList field.
+func (r *mutationResolver) UnsubscribeFromMailingList(ctx context.Context) (*types.UnsubscribeFromMailingListPayload, error) {
+	trustCenter := compliancepage.CompliancePageFromContext(ctx)
+	if trustCenter.MailingListID == nil {
+		return nil, gqlutils.NotFoundf(ctx, "mailing list not found")
+	}
+
+	identity := authn.IdentityFromContext(ctx)
+
+	subscriber, err := r.mailman.GetSubscriber(ctx, *trustCenter.MailingListID, identity.EmailAddress)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot get mailing list subscription", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+	if subscriber == nil {
+		return nil, gqlutils.NotFoundf(ctx, "not subscribed to this mailing list")
+	}
+
+	if err := r.mailman.DeleteSubscriber(ctx, subscriber.ID); err != nil {
+		if errors.Is(err, mailman.ErrSubscriberNotFound) {
+			return nil, gqlutils.NotFoundf(ctx, "not subscribed to this mailing list")
+		}
+		r.logger.ErrorCtx(ctx, "cannot unsubscribe from mailing list", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return &types.UnsubscribeFromMailingListPayload{DeletedMailingListSubscriberID: &subscriber.ID}, nil
+}
+
+// ViewerSubscription is the resolver for the viewerSubscription field.
+func (r *trustCenterResolver) ViewerSubscription(ctx context.Context, obj *types.TrustCenter) (*types.MailingListSubscriber, error) {
+	trustCenter := compliancepage.CompliancePageFromContext(ctx)
+	if trustCenter.MailingListID == nil {
+		return nil, nil
+	}
+
+	identity := authn.IdentityFromContext(ctx)
+	if identity == nil {
+		return nil, nil
+	}
+
+	subscriber, err := r.mailman.GetSubscriber(ctx, *trustCenter.MailingListID, identity.EmailAddress)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot get mailing list subscription", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	if subscriber == nil {
+		return nil, nil
+	}
+
+	return types.NewMailingListSubscriber(subscriber), nil
+}
+
+// Updates is the resolver for the updates field.
+func (r *trustCenterResolver) Updates(ctx context.Context, obj *types.TrustCenter, first *int, after *page.CursorKey, last *int, before *page.CursorKey) (*types.MailingListUpdateConnection, error) {
+	trustService := r.TrustService(ctx, obj.ID.TenantID())
+
+	tc, err := trustService.TrustCenters.Get(ctx, obj.ID)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot load trust center", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	if tc.MailingListID == nil {
+		return &types.MailingListUpdateConnection{Edges: []*types.MailingListUpdateEdge{}, PageInfo: &types.PageInfo{}}, nil
+	}
+
+	pageOrderBy := page.OrderBy[coredata.MailingListUpdateOrderField]{
+		Field:     coredata.MailingListUpdateOrderFieldUpdatedAt,
+		Direction: page.OrderDirectionDesc,
+	}
+	cursor := types.NewCursor(first, after, last, before, pageOrderBy)
+
+	result, err := r.mailman.ListSentMailingListUpdates(ctx, *tc.MailingListID, cursor)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot list mailing list updates", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return types.NewMailingListUpdateConnection(result), nil
+}
--- a/pkg/server/api/trust/v1/nda.resolvers.go
+++ b/pkg/server/api/trust/v1/nda.resolvers.go
@@ -0,0 +1,166 @@
+package trust_v1
+
+// This file will be automatically regenerated based on the schema, any resolver
+// implementations
+// will be copied through when generating and any unknown code will be moved to the end.
+// Code generated by github.com/99designs/gqlgen version v0.17.87
+
+import (
+	"context"
+	"net"
+	"time"
+
+	"go.gearno.de/kit/log"
+	"go.probo.inc/probo/pkg/coredata"
+	"go.probo.inc/probo/pkg/esign"
+	"go.probo.inc/probo/pkg/server/api/authn"
+	"go.probo.inc/probo/pkg/server/api/compliancepage"
+	"go.probo.inc/probo/pkg/server/api/trust/v1/schema"
+	"go.probo.inc/probo/pkg/server/api/trust/v1/types"
+	"go.probo.inc/probo/pkg/server/gqlutils"
+)
+
+// AcceptElectronicSignature is the resolver for the acceptElectronicSignature field.
+func (r *mutationResolver) AcceptElectronicSignature(ctx context.Context, input types.AcceptElectronicSignatureInput) (*types.AcceptElectronicSignaturePayload, error) {
+	var (
+		identity = authn.IdentityFromContext(ctx)
+		httpReq  = gqlutils.HTTPRequestFromContext(ctx)
+	)
+
+	signerIP, _, _ := net.SplitHostPort(httpReq.RemoteAddr)
+	if signerIP == "" {
+		signerIP = httpReq.RemoteAddr
+	}
+
+	signature, err := r.esign.AcceptSignature(
+		ctx,
+		&esign.AcceptSignatureRequest{
+			SignatureID:    input.SignatureID,
+			SignerFullName: identity.FullName,
+			SignerEmail:    identity.EmailAddress,
+			SignerIPAddr:   signerIP,
+			SignerUA:       httpReq.UserAgent(),
+		},
+	)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot accept electronic signature", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return &types.AcceptElectronicSignaturePayload{
+		Signature: types.NewElectronicSignature(signature),
+	}, nil
+}
+
+// RecordSigningEvent is the resolver for the recordSigningEvent field.
+func (r *mutationResolver) RecordSigningEvent(ctx context.Context, input types.RecordSigningEventInput) (*types.RecordSigningEventPayload, error) {
+	var (
+		identity = authn.IdentityFromContext(ctx)
+		httpReq  = gqlutils.HTTPRequestFromContext(ctx)
+	)
+
+	actorIP, _, _ := net.SplitHostPort(httpReq.RemoteAddr)
+	if actorIP == "" {
+		actorIP = httpReq.RemoteAddr
+	}
+
+	if err := r.esign.RecordEvent(
+		ctx,
+		&esign.RecordEventRequest{
+			SignatureID: input.SignatureID,
+			EventType:   input.EventType,
+			EventSource: coredata.ElectronicSignatureEventSourceClient,
+			ActorEmail:  identity.EmailAddress,
+			ActorIPAddr: actorIP,
+			ActorUA:     httpReq.UserAgent(),
+		},
+	); err != nil {
+		r.logger.ErrorCtx(ctx, "cannot record signing event", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return &types.RecordSigningEventPayload{Success: true}, nil
+}
+
+// FileURL is the resolver for the fileUrl field.
+func (r *nonDisclosureAgreementResolver) FileURL(ctx context.Context, obj *types.NonDisclosureAgreement) (string, error) {
+	trustCenter := compliancepage.CompliancePageFromContext(ctx)
+
+	if identity := authn.IdentityFromContext(ctx); identity != nil && r.esign != nil {
+		trustService := r.TrustService(ctx, trustCenter.ID.TenantID())
+
+		access, err := trustService.TrustCenterAccesses.GetAccess(ctx, trustCenter.ID, identity.ID)
+		if err == nil && access.ElectronicSignatureID != nil {
+			fileURL, err := r.esign.GenerateSignatureFileURL(ctx, *access.ElectronicSignatureID, 15*time.Minute)
+			if err == nil {
+				return fileURL, nil
+			}
+
+			r.logger.ErrorCtx(ctx, "cannot generate signature file URL, falling back to original NDA", log.Error(err))
+		}
+	}
+
+	trustService := r.TrustService(ctx, trustCenter.ID.TenantID())
+
+	fileURL, err := trustService.TrustCenters.GenerateNDAFileURL(ctx, trustCenter.ID, 15*time.Minute)
+	if err != nil {
+		return "", gqlutils.Internal(ctx)
+	}
+
+	return fileURL, nil
+}
+
+// ViewerSignature is the resolver for the viewerSignature field.
+func (r *nonDisclosureAgreementResolver) ViewerSignature(ctx context.Context, obj *types.NonDisclosureAgreement) (*types.ElectronicSignature, error) {
+	identity := authn.IdentityFromContext(ctx)
+	if identity == nil {
+		return nil, nil
+	}
+
+	trustCenter := compliancepage.CompliancePageFromContext(ctx)
+	trustService := r.TrustService(ctx, trustCenter.ID.TenantID())
+
+	access, err := trustService.TrustCenterAccesses.GetAccess(ctx, trustCenter.ID, identity.ID)
+	if err != nil {
+		return nil, nil
+	}
+
+	if access.ElectronicSignatureID == nil {
+		return nil, nil
+	}
+
+	sig, err := r.esign.GetSignatureByID(ctx, *access.ElectronicSignatureID)
+	if err != nil {
+		return nil, nil
+	}
+
+	return types.NewElectronicSignature(sig), nil
+}
+
+// NonDisclosureAgreement is the resolver for the nonDisclosureAgreement field.
+func (r *trustCenterResolver) NonDisclosureAgreement(ctx context.Context, obj *types.TrustCenter) (*types.NonDisclosureAgreement, error) {
+	trustCenter := compliancepage.CompliancePageFromContext(ctx)
+	if trustCenter.NonDisclosureAgreementFileID == nil {
+		return nil, nil
+	}
+
+	trustService := r.TrustService(ctx, obj.ID.TenantID())
+
+	file, err := trustService.TrustCenters.GetNDAFile(ctx, obj.ID)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot load NDA file", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+	if file == nil {
+		return nil, nil
+	}
+
+	return types.NewNonDisclosureAgreement(file), nil
+}
+
+// NonDisclosureAgreement returns schema.NonDisclosureAgreementResolver implementation.
+func (r *Resolver) NonDisclosureAgreement() schema.NonDisclosureAgreementResolver {
+	return &nonDisclosureAgreementResolver{r}
+}
+
+type nonDisclosureAgreementResolver struct{ *Resolver }
--- a/pkg/server/api/trust/v1/trust_center.resolvers.go
+++ b/pkg/server/api/trust/v1/trust_center.resolvers.go
@@ -0,0 +1,745 @@
+package trust_v1
+
+// This file will be automatically regenerated based on the schema, any resolver
+// implementations
+// will be copied through when generating and any unknown code will be moved to the end.
+// Code generated by github.com/99designs/gqlgen version v0.17.87
+
+import (
+	"context"
+	"encoding/base64"
+	"errors"
+	"fmt"
+	"time"
+
+	"go.gearno.de/kit/log"
+	"go.probo.inc/probo/pkg/coredata"
+	"go.probo.inc/probo/pkg/gid"
+	"go.probo.inc/probo/pkg/server/api/authn"
+	"go.probo.inc/probo/pkg/server/api/compliancepage"
+	"go.probo.inc/probo/pkg/server/api/trust/v1/schema"
+	"go.probo.inc/probo/pkg/server/api/trust/v1/types"
+	"go.probo.inc/probo/pkg/server/gqlutils"
+	"go.probo.inc/probo/pkg/trust"
+)
+
+// Framework is the resolver for the framework field.
+func (r *auditResolver) Framework(ctx context.Context, obj *types.Audit) (*types.Framework, error) {
+	trustService := r.TrustService(ctx, obj.ID.TenantID())
+
+	audit, err := trustService.Audits.Get(ctx, obj.ID)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot load audit", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	framework, err := trustService.Frameworks.Get(ctx, audit.FrameworkID)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot load framework", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return types.NewFramework(framework), nil
+}
+
+// Report is the resolver for the report field.
+func (r *auditResolver) Report(ctx context.Context, obj *types.Audit) (*types.Report, error) {
+	trustService := r.TrustService(ctx, obj.ID.TenantID())
+
+	audit, err := trustService.Audits.Get(ctx, obj.ID)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot load audit", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	if audit.ReportID == nil {
+		return nil, nil
+	}
+
+	trustCenter := compliancepage.CompliancePageFromContext(ctx)
+
+	report, err := trustService.Reports.Get(ctx, trustCenter.OrganizationID, *audit.ReportID)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot load report", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return types.NewReport(report), nil
+}
+
+// Framework is the resolver for the framework field on ComplianceFramework.
+func (r *complianceFrameworkResolver) Framework(ctx context.Context, obj *types.ComplianceFramework) (*types.Framework, error) {
+	trustService := r.TrustService(ctx, obj.ID.TenantID())
+
+	framework, err := trustService.Frameworks.Get(ctx, obj.FrameworkID)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot load framework", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return types.NewFramework(framework), nil
+}
+
+// IsUserAuthorized is the resolver for the isUserAuthorized field.
+func (r *documentResolver) IsUserAuthorized(ctx context.Context, obj *types.Document) (bool, error) {
+	trustService := r.TrustService(ctx, obj.ID.TenantID())
+	trustCenter := compliancepage.CompliancePageFromContext(ctx)
+
+	document, err := trustService.Documents.Get(ctx, trustCenter.OrganizationID, obj.ID)
+	if err != nil {
+		if errors.Is(err, trust.ErrDocumentNotFound) || errors.Is(err, trust.ErrDocumentNotVisible) || errors.Is(err, coredata.ErrResourceNotFound) {
+			return false, gqlutils.NotFoundf(ctx, "document %q not found", obj.ID)
+		}
+		if _, ok := errors.AsType[*trust.ErrDocumentArchived](err); ok {
+			return false, gqlutils.NotFoundf(ctx, "document %q not found", obj.ID)
+		}
+		r.logger.ErrorCtx(ctx, "cannot load document", log.Error(err))
+		return false, gqlutils.Internal(ctx)
+	}
+
+	if document.TrustCenterVisibility == coredata.TrustCenterVisibilityPublic {
+		return true, nil
+	}
+
+	identity := authn.IdentityFromContext(ctx)
+	if identity == nil {
+		return false, nil
+	}
+
+	documentAccess, err := trustService.TrustCenterAccesses.GetDocumentAccess(
+		ctx,
+		trustCenter.ID,
+		identity.ID,
+		obj.ID,
+	)
+	if err != nil {
+		if errors.Is(err, trust.ErrMembershipNotFound) ||
+			errors.Is(err, trust.ErrUserNotFound) ||
+			errors.Is(err, trust.ErrUserInactive) ||
+			errors.Is(err, trust.ErrDocumentAccessNotFound) {
+			return false, nil
+		}
+
+		r.logger.ErrorCtx(ctx, "cannot check document access", log.Error(err))
+		return false, gqlutils.Internal(ctx)
+	}
+
+	return documentAccess.Status == coredata.TrustCenterDocumentAccessStatusGranted, nil
+}
+
+// Access is the resolver for the access field.
+func (r *documentResolver) Access(ctx context.Context, obj *types.Document) (*types.DocumentAccess, error) {
+	trustService := r.TrustService(ctx, obj.ID.TenantID())
+	trustCenter := compliancepage.CompliancePageFromContext(ctx)
+
+	identity := authn.IdentityFromContext(ctx)
+	if identity == nil {
+		return nil, nil // User is not authenticated, so no access requested
+	}
+
+	access, err := trustService.TrustCenterAccesses.GetDocumentAccess(
+		ctx,
+		trustCenter.ID,
+		identity.ID,
+		obj.ID,
+	)
+	if err != nil {
+		if errors.Is(err, trust.ErrMembershipNotFound) ||
+			errors.Is(err, trust.ErrUserNotFound) ||
+			errors.Is(err, trust.ErrDocumentAccessNotFound) {
+			return nil, nil
+		}
+
+		if errors.Is(err, trust.ErrUserInactive) {
+			return nil, gqlutils.Forbidden(ctx, err)
+		}
+
+		r.logger.ErrorCtx(ctx, "cannot get document access", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return &types.DocumentAccess{
+		ID:     access.ID,
+		Status: access.Status,
+	}, nil
+}
+
+// LightLogoURL is the resolver for the lightLogoURL field.
+func (r *frameworkResolver) LightLogoURL(ctx context.Context, obj *types.Framework) (*string, error) {
+	trustService := r.TrustService(ctx, obj.ID.TenantID())
+
+	return trustService.Frameworks.GenerateLightLogoURL(ctx, obj.ID, 1*time.Hour)
+}
+
+// DarkLogoURL is the resolver for the darkLogoURL field.
+func (r *frameworkResolver) DarkLogoURL(ctx context.Context, obj *types.Framework) (*string, error) {
+	trustService := r.TrustService(ctx, obj.ID.TenantID())
+
+	return trustService.Frameworks.GenerateDarkLogoURL(ctx, obj.ID, 1*time.Hour)
+}
+
+// RequestAllAccesses is the resolver for the requestAllAccesses field.
+func (r *mutationResolver) RequestAllAccesses(ctx context.Context) (*types.RequestAccessesPayload, error) {
+	trustCenter := compliancepage.CompliancePageFromContext(ctx)
+	trustService := r.TrustService(ctx, trustCenter.ID.TenantID())
+
+	identity := authn.IdentityFromContext(ctx)
+	if identity == nil {
+		return nil, gqlutils.Unauthenticatedf(ctx, "authentication is required to request access")
+	}
+
+	access, err := trustService.TrustCenterAccesses.Request(
+		ctx,
+		&trust.TrustCenterAccessRequest{
+			TrustCenterID: trustCenter.ID,
+			IdentityID:    identity.ID,
+			DocumentIDs:   nil,
+			ReportIDs:     nil,
+		},
+	)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot create trust center access", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return &types.RequestAccessesPayload{
+		TrustCenterAccess: &types.TrustCenterAccess{
+			ID:        access.ID,
+			CreatedAt: access.CreatedAt,
+			UpdatedAt: access.UpdatedAt,
+		},
+	}, nil
+}
+
+// ExportDocumentPDF is the resolver for the exportDocumentPDF field.
+func (r *mutationResolver) ExportDocumentPDF(ctx context.Context, input types.ExportDocumentPDFInput) (*types.ExportDocumentPDFPayload, error) {
+	trustService := r.TrustService(ctx, input.DocumentID.TenantID())
+	trustCenter := compliancepage.CompliancePageFromContext(ctx)
+
+	document, err := trustService.Documents.Get(ctx, trustCenter.OrganizationID, input.DocumentID)
+	if err != nil {
+		if errors.Is(err, trust.ErrDocumentNotFound) || errors.Is(err, trust.ErrDocumentNotVisible) || errors.Is(err, coredata.ErrResourceNotFound) {
+			return nil, gqlutils.NotFoundf(ctx, "document %q not found", input.DocumentID)
+		}
+		if _, ok := errors.AsType[*trust.ErrDocumentArchived](err); ok {
+			return nil, gqlutils.NotFoundf(ctx, "document %q not found", input.DocumentID)
+		}
+		r.logger.ErrorCtx(ctx, "cannot load document", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	if document.TrustCenterVisibility == coredata.TrustCenterVisibilityPublic {
+		pdf, err := trustService.Documents.ExportPDFWithoutWatermark(ctx, input.DocumentID)
+		if err != nil {
+			r.logger.ErrorCtx(ctx, "cannot export document PDF", log.Error(err))
+			return nil, gqlutils.Internal(ctx)
+		}
+
+		return &types.ExportDocumentPDFPayload{
+			Data: fmt.Sprintf("data:application/pdf;base64,%s", base64.StdEncoding.EncodeToString(pdf)),
+		}, nil
+	}
+
+	identity := authn.IdentityFromContext(ctx)
+	if identity == nil {
+		return nil, gqlutils.Unauthenticated(ctx, errors.New("unauthenticated"))
+	}
+
+	documentAccess, err := trustService.TrustCenterAccesses.GetDocumentAccess(
+		ctx,
+		trustCenter.ID,
+		identity.ID,
+		input.DocumentID,
+	)
+	if err != nil {
+		return nil, nil
+	}
+
+	if documentAccess.Status != coredata.TrustCenterDocumentAccessStatusGranted {
+		return nil, gqlutils.Forbiddenf(ctx, "access denied: no permission to access this document")
+	}
+
+	pdf, err := trustService.Documents.ExportPDF(ctx, input.DocumentID, identity.EmailAddress)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot export document PDF", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return &types.ExportDocumentPDFPayload{
+		Data: fmt.Sprintf("data:application/pdf;base64,%s", base64.StdEncoding.EncodeToString(pdf)),
+	}, nil
+}
+
+// ExportReportPDF is the resolver for the exportReportPDF field.
+func (r *mutationResolver) ExportReportPDF(ctx context.Context, input types.ExportReportPDFInput) (*types.ExportReportPDFPayload, error) {
+	trustService := r.TrustService(ctx, input.ReportID.TenantID())
+
+	trustCenter := compliancepage.CompliancePageFromContext(ctx)
+
+	audit, err := trustService.Audits.GetByReportID(ctx, input.ReportID)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot load audit", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	if audit.TrustCenterVisibility == coredata.TrustCenterVisibilityPublic {
+		pdf, err := trustService.Reports.ExportPDFWithoutWatermark(ctx, input.ReportID)
+		if err != nil {
+			r.logger.ErrorCtx(ctx, "cannot export report PDF", log.Error(err))
+			return nil, gqlutils.Internal(ctx)
+		}
+
+		return &types.ExportReportPDFPayload{
+			Data: fmt.Sprintf("data:application/pdf;base64,%s", base64.StdEncoding.EncodeToString(pdf)),
+		}, nil
+	}
+
+	identity := authn.IdentityFromContext(ctx)
+	if identity == nil {
+		return nil, gqlutils.Unauthenticatedf(ctx, "unauthenticated")
+	}
+
+	reportAccess, err := trustService.TrustCenterAccesses.GetReportAccess(
+		ctx,
+		trustCenter.ID,
+		identity.ID,
+		input.ReportID,
+	)
+	if err != nil {
+		return nil, nil
+	}
+
+	if reportAccess.Status != coredata.TrustCenterDocumentAccessStatusGranted {
+		return nil, gqlutils.Forbiddenf(ctx, "access denied: no permission to access this report")
+	}
+
+	pdf, err := trustService.Reports.ExportPDF(ctx, input.ReportID, identity.EmailAddress)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot export report PDF", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return &types.ExportReportPDFPayload{
+		Data: fmt.Sprintf("data:application/pdf;base64,%s", base64.StdEncoding.EncodeToString(pdf)),
+	}, nil
+}
+
+// ExportTrustCenterFile is the resolver for the exportTrustCenterFile field.
+func (r *mutationResolver) ExportTrustCenterFile(ctx context.Context, input types.ExportTrustCenterFileInput) (*types.ExportTrustCenterFilePayload, error) {
+	trustCenter := compliancepage.CompliancePageFromContext(ctx)
+	trustService := r.TrustService(ctx, trustCenter.ID.TenantID())
+
+	trustCenterFile, err := trustService.TrustCenterFiles.Get(ctx, trustCenter.OrganizationID, input.TrustCenterFileID)
+	if err != nil {
+		if errors.Is(err, trust.ErrTrustCenterFileNotFound) || errors.Is(err, trust.ErrTrustCenterFileNotVisible) {
+			return nil, gqlutils.NotFoundf(ctx, "trust center file %q not found", input.TrustCenterFileID)
+		}
+		r.logger.ErrorCtx(ctx, "cannot load trust center file", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	if trustCenterFile.TrustCenterVisibility == coredata.TrustCenterVisibilityPublic {
+		fileData, mimeType, err := trustService.TrustCenterFiles.ExportFileWithoutWatermark(ctx, input.TrustCenterFileID)
+		if err != nil {
+			r.logger.ErrorCtx(ctx, "cannot export trust center file", log.Error(err))
+			return nil, gqlutils.Internal(ctx)
+		}
+
+		return &types.ExportTrustCenterFilePayload{
+			Data: fmt.Sprintf("data:%s;base64,%s", mimeType, base64.StdEncoding.EncodeToString(fileData)),
+		}, nil
+	}
+
+	identity := authn.IdentityFromContext(ctx)
+	if identity == nil {
+		return nil, gqlutils.Unauthenticatedf(ctx, "unauthenticated")
+	}
+
+	fileAccess, err := trustService.TrustCenterAccesses.GetTrustCenterFileAccess(ctx,
+		trustCenter.ID,
+		identity.ID,
+		input.TrustCenterFileID,
+	)
+	if err != nil {
+		return nil, nil
+	}
+
+	if fileAccess.Status != coredata.TrustCenterDocumentAccessStatusGranted {
+		return nil, gqlutils.Forbiddenf(ctx, "access denied: no permission to access this file")
+	}
+
+	fileData, mimeType, err := trustService.TrustCenterFiles.ExportFile(ctx, input.TrustCenterFileID, identity.EmailAddress)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot export trust center file", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return &types.ExportTrustCenterFilePayload{
+		Data: fmt.Sprintf("data:%s;base64,%s", mimeType, base64.StdEncoding.EncodeToString(fileData)),
+	}, nil
+}
+
+// RequestDocumentAccess is the resolver for the requestDocumentAccess field.
+func (r *mutationResolver) RequestDocumentAccess(ctx context.Context, input types.RequestDocumentAccessInput) (*types.RequestDocumentAccessPayload, error) {
+	trustCenter := compliancepage.CompliancePageFromContext(ctx)
+	trustService := r.TrustService(ctx, trustCenter.ID.TenantID())
+
+	document, err := trustService.Documents.Get(ctx, trustCenter.OrganizationID, input.DocumentID)
+	if err != nil {
+		if errors.Is(err, trust.ErrDocumentNotFound) || errors.Is(err, trust.ErrDocumentNotVisible) || errors.Is(err, coredata.ErrResourceNotFound) {
+			return nil, gqlutils.NotFoundf(ctx, "document %q not found", input.DocumentID)
+		}
+		if _, ok := errors.AsType[*trust.ErrDocumentArchived](err); ok {
+			return nil, gqlutils.NotFoundf(ctx, "document %q not found", input.DocumentID)
+		}
+		r.logger.ErrorCtx(ctx, "cannot load document", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+	if document.TrustCenterVisibility == coredata.TrustCenterVisibilityPublic {
+		return nil, gqlutils.Invalidf(
+			ctx,
+			"document is publicly available and does not require access request",
+		)
+	}
+
+	identity := authn.IdentityFromContext(ctx)
+	if identity == nil {
+		return nil, gqlutils.Unauthenticatedf(ctx, "authentication is required to request access")
+	}
+
+	if _, err := trustService.TrustCenterAccesses.Request(
+		ctx,
+		&trust.TrustCenterAccessRequest{
+			TrustCenterID:      trustCenter.ID,
+			IdentityID:         identity.ID,
+			DocumentIDs:        []gid.GID{input.DocumentID},
+			ReportIDs:          []gid.GID{},
+			TrustCenterFileIDs: []gid.GID{},
+		},
+	); err != nil {
+		r.logger.ErrorCtx(ctx, "cannot request document access", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return &types.RequestDocumentAccessPayload{
+		Document: types.NewDocument(document),
+	}, nil
+}
+
+// RequestReportAccess is the resolver for the requestReportAccess field.
+func (r *mutationResolver) RequestReportAccess(ctx context.Context, input types.RequestReportAccessInput) (*types.RequestReportAccessPayload, error) {
+	trustCenter := compliancepage.CompliancePageFromContext(ctx)
+	trustService := r.TrustService(ctx, trustCenter.ID.TenantID())
+
+	audit, err := trustService.Audits.GetByReportID(ctx, input.ReportID)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot load audit", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	if audit.TrustCenterVisibility == coredata.TrustCenterVisibilityPublic {
+		return nil, gqlutils.Invalidf(
+			ctx,
+			"report is publicly available and does not require access request",
+		)
+	}
+
+	identity := authn.IdentityFromContext(ctx)
+	if identity == nil {
+		return nil, gqlutils.Unauthenticatedf(ctx, "authentication is required to request access")
+	}
+
+	if _, err := trustService.TrustCenterAccesses.Request(
+		ctx,
+		&trust.TrustCenterAccessRequest{
+			TrustCenterID:      trustCenter.ID,
+			IdentityID:         identity.ID,
+			DocumentIDs:        []gid.GID{},
+			ReportIDs:          []gid.GID{input.ReportID},
+			TrustCenterFileIDs: []gid.GID{},
+		},
+	); err != nil {
+		r.logger.ErrorCtx(ctx, "cannot request report access", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return &types.RequestReportAccessPayload{
+		Audit: types.NewAudit(audit),
+	}, nil
+}
+
+// RequestTrustCenterFileAccess is the resolver for the requestTrustCenterFileAccess field.
+func (r *mutationResolver) RequestTrustCenterFileAccess(ctx context.Context, input types.RequestTrustCenterFileAccessInput) (*types.RequestFileAccessPayload, error) {
+	trustCenter := compliancepage.CompliancePageFromContext(ctx)
+	trustService := r.TrustService(ctx, trustCenter.ID.TenantID())
+
+	trustCenterFile, err := trustService.TrustCenterFiles.Get(ctx, trustCenter.OrganizationID, input.TrustCenterFileID)
+	if err != nil {
+		if errors.Is(err, trust.ErrTrustCenterFileNotFound) || errors.Is(err, trust.ErrTrustCenterFileNotVisible) {
+			return nil, gqlutils.NotFoundf(ctx, "trust center file %q not found", input.TrustCenterFileID)
+		}
+		r.logger.ErrorCtx(ctx, "cannot load trust center file", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	if trustCenterFile.TrustCenterVisibility == coredata.TrustCenterVisibilityPublic {
+		return nil, gqlutils.Invalidf(
+			ctx,
+			"trust center file is publicly available and does not require access request",
+		)
+	}
+
+	identity := authn.IdentityFromContext(ctx)
+	if identity == nil {
+		return nil, gqlutils.Unauthenticatedf(ctx, "authentication is required to request access")
+	}
+
+	if _, err := trustService.TrustCenterAccesses.Request(
+		ctx,
+		&trust.TrustCenterAccessRequest{
+			TrustCenterID:      trustCenter.ID,
+			IdentityID:         identity.ID,
+			DocumentIDs:        []gid.GID{},
+			ReportIDs:          []gid.GID{},
+			TrustCenterFileIDs: []gid.GID{input.TrustCenterFileID},
+		},
+	); err != nil {
+		r.logger.ErrorCtx(ctx, "cannot request trust center file access", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return &types.RequestFileAccessPayload{
+		File: types.NewTrustCenterFile(trustCenterFile),
+	}, nil
+}
+
+// IsUserAuthorized is the resolver for the isUserAuthorized field.
+func (r *reportResolver) IsUserAuthorized(ctx context.Context, obj *types.Report) (bool, error) {
+	trustService := r.TrustService(ctx, obj.ID.TenantID())
+
+	trustCenter := compliancepage.CompliancePageFromContext(ctx)
+
+	audit, err := trustService.Audits.GetByReportID(ctx, obj.ID)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot load document", log.Error(err))
+		return false, gqlutils.Internal(ctx)
+	}
+
+	if audit.TrustCenterVisibility == coredata.TrustCenterVisibilityPublic {
+		return true, nil
+	}
+
+	identity := authn.IdentityFromContext(ctx)
+	if identity == nil {
+		return false, nil
+	}
+
+	reportAccess, err := trustService.TrustCenterAccesses.GetReportAccess(ctx,
+		trustCenter.ID,
+		identity.ID,
+		obj.ID,
+	)
+	if err != nil {
+		if errors.Is(err, trust.ErrMembershipNotFound) ||
+			errors.Is(err, trust.ErrUserNotFound) ||
+			errors.Is(err, trust.ErrUserInactive) ||
+			errors.Is(err, trust.ErrDocumentAccessNotFound) {
+			return false, nil
+		}
+
+		r.logger.ErrorCtx(ctx, "cannot check report access", log.Error(err))
+		return false, gqlutils.Internal(ctx)
+	}
+
+	return reportAccess.Status == coredata.TrustCenterDocumentAccessStatusGranted, nil
+}
+
+// Access is the resolver for the access field.
+func (r *reportResolver) Access(ctx context.Context, obj *types.Report) (*types.DocumentAccess, error) {
+	trustService := r.TrustService(ctx, obj.ID.TenantID())
+	trustCenter := compliancepage.CompliancePageFromContext(ctx)
+
+	identity := authn.IdentityFromContext(ctx)
+	if identity == nil {
+		return nil, nil // User is not authenticated, so no access requested
+	}
+
+	access, err := trustService.TrustCenterAccesses.GetReportAccess(
+		ctx,
+		trustCenter.ID,
+		identity.ID,
+		obj.ID,
+	)
+	if err != nil {
+		if errors.Is(err, trust.ErrMembershipNotFound) ||
+			errors.Is(err, trust.ErrUserNotFound) ||
+			errors.Is(err, trust.ErrDocumentAccessNotFound) {
+			return nil, nil
+		}
+
+		if errors.Is(err, trust.ErrUserInactive) {
+			return nil, gqlutils.Forbidden(ctx, err)
+		}
+
+		r.logger.ErrorCtx(ctx, "cannot get audit report access", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return &types.DocumentAccess{
+		ID:     access.ID,
+		Status: access.Status,
+	}, nil
+}
+
+// TotalCount is the resolver for the totalCount field.
+func (r *subprocessorConnectionResolver) TotalCount(ctx context.Context, obj *types.SubprocessorConnection) (int, error) {
+	trustService := r.TrustService(ctx, obj.ParentID.TenantID())
+
+	switch obj.Resolver.(type) {
+	case *trustCenterResolver:
+		count, err := trustService.Vendors.CountForTrustCenterId(ctx, obj.ParentID)
+		if err != nil {
+			r.logger.ErrorCtx(ctx, "cannot count subprocessors", log.Error(err))
+			return 0, gqlutils.Internal(ctx)
+		}
+		return count, nil
+	}
+
+	r.logger.ErrorCtx(ctx, "not implemented: TotalCount for parent type")
+	return 0, gqlutils.Internal(ctx)
+}
+
+// IsUserAuthorized is the resolver for the isUserAuthorized field.
+func (r *trustCenterFileResolver) IsUserAuthorized(ctx context.Context, obj *types.TrustCenterFile) (bool, error) {
+	trustService := r.TrustService(ctx, obj.ID.TenantID())
+
+	trustCenter := compliancepage.CompliancePageFromContext(ctx)
+
+	trustCenterFile, err := trustService.TrustCenterFiles.Get(ctx, trustCenter.OrganizationID, obj.ID)
+	if err != nil {
+		if errors.Is(err, trust.ErrTrustCenterFileNotFound) || errors.Is(err, trust.ErrTrustCenterFileNotVisible) {
+			return false, gqlutils.NotFoundf(ctx, "trust center file %q not found", obj.ID)
+		}
+		r.logger.ErrorCtx(ctx, "cannot load trust center file", log.Error(err))
+		return false, gqlutils.Internal(ctx)
+	}
+
+	if trustCenterFile.TrustCenterVisibility == coredata.TrustCenterVisibilityPublic {
+		return true, nil
+	}
+
+	identity := authn.IdentityFromContext(ctx)
+	if identity == nil {
+		return false, nil
+	}
+
+	fileAccess, err := trustService.TrustCenterAccesses.GetTrustCenterFileAccess(ctx,
+		trustCenter.ID,
+		identity.ID,
+		obj.ID,
+	)
+	if err != nil {
+		if errors.Is(err, trust.ErrMembershipNotFound) ||
+			errors.Is(err, trust.ErrUserNotFound) ||
+			errors.Is(err, trust.ErrUserInactive) ||
+			errors.Is(err, trust.ErrDocumentAccessNotFound) {
+			return false, nil
+		}
+
+		r.logger.ErrorCtx(ctx, "cannot check trust center file access", log.Error(err))
+		return false, gqlutils.Internal(ctx)
+	}
+
+	return fileAccess.Status == coredata.TrustCenterDocumentAccessStatusGranted, nil
+}
+
+// Access is the resolver for the access field.
+func (r *trustCenterFileResolver) Access(ctx context.Context, obj *types.TrustCenterFile) (*types.DocumentAccess, error) {
+	trustService := r.TrustService(ctx, obj.ID.TenantID())
+	trustCenter := compliancepage.CompliancePageFromContext(ctx)
+
+	identity := authn.IdentityFromContext(ctx)
+	if identity == nil {
+		return nil, nil // User is not authenticated, so no access requested
+	}
+
+	access, err := trustService.TrustCenterAccesses.GetTrustCenterFileAccess(
+		ctx,
+		trustCenter.ID,
+		identity.ID,
+		obj.ID,
+	)
+	if err != nil {
+		if errors.Is(err, trust.ErrMembershipNotFound) ||
+			errors.Is(err, trust.ErrUserNotFound) ||
+			errors.Is(err, trust.ErrDocumentAccessNotFound) {
+			return nil, nil
+		}
+
+		if errors.Is(err, trust.ErrUserInactive) {
+			return nil, gqlutils.Forbidden(ctx, err)
+		}
+
+		r.logger.ErrorCtx(ctx, "cannot get file access", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return &types.DocumentAccess{
+		ID:     access.ID,
+		Status: access.Status,
+	}, nil
+}
+
+// LogoURL is the resolver for the logoUrl field.
+func (r *trustCenterReferenceResolver) LogoURL(ctx context.Context, obj *types.TrustCenterReference) (string, error) {
+	trustService := r.TrustService(ctx, obj.ID.TenantID())
+
+	logoURL, err := trustService.TrustCenterReferences.GenerateLogoURL(ctx, obj.ID, 1*time.Hour)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot generate logo URL", log.Error(err))
+		return "", gqlutils.Internal(ctx)
+	}
+
+	return logoURL, nil
+}
+
+// Audit returns schema.AuditResolver implementation.
+func (r *Resolver) Audit() schema.AuditResolver { return &auditResolver{r} }
+
+// ComplianceFramework returns schema.ComplianceFrameworkResolver implementation.
+func (r *Resolver) ComplianceFramework() schema.ComplianceFrameworkResolver {
+	return &complianceFrameworkResolver{r}
+}
+
+// Document returns schema.DocumentResolver implementation.
+func (r *Resolver) Document() schema.DocumentResolver { return &documentResolver{r} }
+
+// Framework returns schema.FrameworkResolver implementation.
+func (r *Resolver) Framework() schema.FrameworkResolver { return &frameworkResolver{r} }
+
+// Report returns schema.ReportResolver implementation.
+func (r *Resolver) Report() schema.ReportResolver { return &reportResolver{r} }
+
+// SubprocessorConnection returns schema.SubprocessorConnectionResolver implementation.
+func (r *Resolver) SubprocessorConnection() schema.SubprocessorConnectionResolver {
+	return &subprocessorConnectionResolver{r}
+}
+
+// TrustCenterFile returns schema.TrustCenterFileResolver implementation.
+func (r *Resolver) TrustCenterFile() schema.TrustCenterFileResolver {
+	return &trustCenterFileResolver{r}
+}
+
+// TrustCenterReference returns schema.TrustCenterReferenceResolver implementation.
+func (r *Resolver) TrustCenterReference() schema.TrustCenterReferenceResolver {
+	return &trustCenterReferenceResolver{r}
+}
+
+type auditResolver struct{ *Resolver }
+type complianceFrameworkResolver struct{ *Resolver }
+type documentResolver struct{ *Resolver }
+type frameworkResolver struct{ *Resolver }
+type reportResolver struct{ *Resolver }
+type subprocessorConnectionResolver struct{ *Resolver }
+type trustCenterFileResolver struct{ *Resolver }
+type trustCenterReferenceResolver struct{ *Resolver }
--- a/pkg/server/api/trust/v1/v1_resolver.go
+++ b/pkg/server/api/trust/v1/v1_resolver.go