Trust Center

Control you can verify.

Your infrastructure, your data and your exit — backed by practices you can inspect, not badges you have to take on faith.

A solid dark cube connected to a glass cube by a detachable thread of light.
Principles

Six commitments behind every delivery.

Customer-owned infrastructure

Deployments run in your accounts. You hold owner access; Broadward holds management permission you can revoke at any time.

Plan-bound approvals

Nothing changes without approval of the exact plan revision. Material changes always return for fresh approval.

Exports and recovery

Every delivery includes data export, documentation and a recovery path — so you can operate without us.

Duplicate-safe execution

Durable job records and idempotency keys stop retries from applying the same change twice.

Privacy by default

No analytics or third-party trackers on this site. Enquiry data is stored on Cloudflare and used only to respond.

Honest status labels

Products are labelled Live, Pilot-ready or In development — and each label means exactly that.

This website

Security on broadward.com.

The practices below apply to this site and its enquiry service today.

  • HTTPS only, with HTTP Strict Transport Security.
  • Strict Content Security Policy: no third-party scripts, fonts or trackers.
  • No analytics or advertising cookies.
  • Enquiries stored in Cloudflare D1 and routed to [email protected], with rate limiting and spam protection.
  • Duplicate-safe submission: retrying never creates a second enquiry.
  • Minimal data: only what you type into the form — never passwords or payment details.
Certifications

Plainly stated.

Broadward does not currently hold formal certifications such as SOC 2 or ISO 27001. We will not display badges we have not earned. Our controls documentation is available to prospective customers on request.

Request controls documentation
Responsible disclosure

Found a vulnerability?

Email [email protected] with “Security disclosure” in the subject. Include steps to reproduce, and please give us reasonable time to fix before any public disclosure. Do not access other people’s data.

Report a vulnerability
The next useful step

Need more detail for a security review?

Tell us what your procurement or security team needs. We will answer precisely — including what we do not yet do.