Trust — Steadwell

01Trust

We see your business up close. Here is how we treat that.

An audit means two people walking your floor, taking notes, and timing real work. This page says what we record, where it goes, who sees it, and when it is deleted. No policy-speak.

Last reviewed 2026-07-29No subcontractorsNo offshore processing

{{ h.v }}

{{ h.l }}

02What we record

We write down less than you might think.

Four kinds of record. One example of each, taken from a real visit's shape.

We recordAsExample
{{ r.what }} {{ r.as }} {{ r.eg }}

And what never gets recorded

  • {{ i }}

03Storage and access

Two people can see your data. Both are named on this site.

Who has access

Gunnar Pelowski Gunnar Pelowski full access
Luka Mortensen Luka Mortensen full access
No third account none exists

No shared drive outside the firm, and nobody is added to a file because they asked nicely. No subcontractors, no offshore processing. If that ever changes, this page changes first.

What reaches Claude, and what does not

Our notes Names stripped Draft help
  • {{ c }}

04Retention

A deletion schedule, written into the engagement.

We do not publish one retention table and apply another. The dates you are held to are the dates you signed.

Deleted after delivery

the usual shape

{{ r.what }} {{ r.when }}

Bars are relative, not to scale beyond the first two rows. Want it gone sooner? Ask through the contact form, any time and without a reason — everything except the signed contract and the invoices goes within 5 business days.

You do not have to ask for an NDA.

We bring a mutual NDA to every engagement, and we will just as happily sign yours. It is not something you have to request, and it is signed before day one either way.

05Tools

Four companies sit behind our work. Here is each one.

The website's vendors see website traffic. The audit's vendors see audit notes. The two lists do not mix.

{{ t.tool }}

{{ t.jurisdiction }}

{{ t.company }}

{{ t.touches }}

{{ t.scope }}

One honest gap: we have not been able to confirm where Web3Forms operates from, so the cell says so rather than guessing. It relays this site's contact form, and nothing from an audit passes through it. The row gets a real answer the day we have one.

06What we can prove

Three badges are drawn. None of them ships yet.

One rule: a badge is true or it is absent. A note underneath is not a substitute.

{{ b.status }}

{{ b.title }}

{{ b.body }}

{{ b.ships }}

07What we do not have

We hold no security certifications. Here is why.

Those audits are built for software companies holding customer data at scale, and they are priced for them. We are two people who hold your notes for ninety days.

Instead, do this

If your vendor review requires a certification we do not have, send us your security questionnaire. We fill those out honestly, and no appears where the answer is no.