Our security - How we handle your data.

You give a security firm access to your systems. Here is exactly what we do with it.

Test data only. We work with test accounts and synthetic data. We do not copy your customers' data.
Credentials. Shared through a password manager, scoped to the test, revoked at the end.
Findings. Stored encrypted and shared only with the people you name. Raw evidence such as recordings, screenshots and logs is deleted 30 days after the retest. The final report is deleted after 12 months unless you ask us to keep it.
Letter register. For each attestation letter we keep only its ID, company, scope, dates and lead tester, so your customers can check it with us.
Devices. Full disk encryption, MFA on every account, no shared logins.
No tracking. This site sets no tracking cookies and runs no ad pixels.
Report a vulnerability. Found an issue on our side? Email security@wardkeylabs.com.

Send us the questionnaire your customer sent.

We will tell you which lines a test answers, in writing, within one business day.