Buy Template
New
SOC 2 Type II
Audited every year by an independent firm
ISO 27001
Certified since 2025
GDPR
EU hosting and a data processing agreement
HIPAA
Business associate agreement available
Service
Purpose
Region
Cloud infrastructure provider
Hosting, storage and backups
US or EU (your choice)
Language model provider
Model inference under zero retention
US or EU (your choice)
Email delivery service
Notifications and handoff emails
US
Error monitoring service
Application errors, with customer data removed
US
Support platform
Customer support tickets
US
Get the security pack.
Our SOC 2 Type II report, ISO 27001 certificate, latest penetration test summary and a completed standard security questionnaire. Sent under NDA within one business day.
Found a vulnerability?
Email security@getwardlow.com.
We reply within one business day.
Do you run penetration tests?
Yes. An independent firm tests the platform every year and after major changes. The latest summary is in the security pack.
How would you tell us about an incident?
We notify affected customers within 72 hours of confirming an incident, as our DPA requires. In practice we aim for 24, with a named contact and regular updates until it’s closed.
Which models do the agents use?
Leading commercial models, hosted in your region under zero-retention agreements. We test every model change before release, and Enterprise customers can be told before a model changes.
Can an agent see data it doesn’t need?
Only what its account can see in your systems, and you set those permissions. Fields you mark as sensitive can be hidden from agents completely.
Can we audit what agents did?
Yes. The Run Log records every step and decision, and exports to your data warehouse or security tools. Admin changes have their own audit log.
Will you sign our DPA or BAA?
Our standard DPA is available on every plan and our BAA on Enterprise. We review customer paper on Enterprise contracts.
We gave Wardlow the questionnaire we use for vendors that touch patient data, even though they wouldn’t. They answered every question in writing, and their agents can only reach the systems we named.
11 days
for the security review, against 60 planned
62%
lower cost per supplier invoice
Peter Lindgren
Chief Information Security Officer
Ashgrove Health
Wardlow
Agents that do the work. People stay in charge.
Floor 4, 612 Bryant Street, San Francisco, CA 94107
SOC 2 Type II · ISO 27001 · GDPR · HIPAA
© 2026 Wardlow, Inc.
Crafted
by Jeeth