Business and contact information
Company name, public website, category, approved competitors, project contacts, billing records, and the information needed to scope and deliver the engagement.
Security and data handling, reviewed September 26, 2026
Clear boundaries for client information.
Broadcastwell’s work begins with measurement, which can involve submitting approved company facts and buyer questions to AI-search providers. This page explains the operating controls and the limits of the public commitment.
Need-to-know access No credentials required for a standard audit Deletion requests supported No unclaimed certifications
Scope
What we collect, and why
Measurement inputs
Approved buyer questions, public company facts, observed AI answers, citations, timestamps, engine names, and repeat-run records used to create the baseline and subsequent reports.
Implementation material
Approved content drafts, source references, analytics exports, screenshots, and other materials a client chooses to provide for the agreed work.
What a standard audit does not need
Passwords, API keys, customer records, regulated health data, payment-card data, or other high-risk information. Do not send such data unless a separate written scope and control plan has been agreed.
AI provider use
What can be placed into prompts
Operating controls
How access and retention are handled
Access
- Limited to personnel working on the relevant engagement.
- Authenticated accounts and, where supported, multi-factor authentication.
- Least-access approach for client workspaces and exports.
- No request for shared personal passwords.
Retention and deletion
- Information is retained while needed to deliver the work and maintain the agreed record.
- Legal, tax, accounting, or contract obligations may require limited continued retention.
- Clients may request return or deletion of eligible project information.
- Deletion requests are confirmed after applicable obligations are checked.
Confidentiality
- Client confidential information is used only for the agreed engagement.
- Public case studies require explicit approval.
- Credentials and sensitive third-party data are excluded from public materials.
- Contract terms control if they differ from this public summary.
Incident reporting
- Suspected exposure is escalated for assessment and containment.
- Affected clients are notified as required by the governing contract and applicable law.
- Evidence is preserved where appropriate for investigation.
- Report a security concern to security@broadcastwell.com.
Relevant providers
Current public subprocessor summary
| Provider | What it does for Broadcastwell | What data reaches it |
|---|---|---|
| OpenAI / ChatGPT | Observes eligible AI-search answers during approved audits and monitoring. | Category questions only. |
| Anthropic / Claude | Same measurement purpose, when included in the agreed five-engine scope. Also powers the site assistant, and is the AI assistant provider we use to prepare orders. | Category questions, the questions visitors type into the site assistant, and order emails, including buyer names and work emails. |
| Perplexity | Runs the free 10-question check and, when agreed, paid multi-engine measurement. | Category questions only. |
| Google AI search experiences | Observes eligible Google-generated answers where available in the agreed measurement scope. | Category questions only. |
| SerpApi | Collects Google AI Overviews and AI Mode answers for research and orders. | Category questions only. |
| Framer | Hosts and delivers the public Broadcastwell website, and processes the contact form and the Partner Network application. | Website traffic, subject to the linked privacy and cookie notices, and the details a visitor submits in those forms, such as name, work email, company name and website. |
| Cloudflare | Hosts audit.broadcastwell.com, index.broadcastwell.com, the site assistant and the client reporting portal. | Traffic to those subdomains and the data those tools display. |
| Google Workspace | Email, and the sheets where form and Free 10-question check records are kept. | Messages sent to and from Broadcastwell, and form and Free 10-question check records. |
| Workflow automation platform | Runs the measurement and reporting automation. | Category questions, engine answers and report data. |
The exact provider set can vary by engagement, availability, geography, and agreed scope. Contract documents and the statement of work control. Provider terms and data practices also apply when their systems are used. The full subprocessor list, including payments, email, forms and CRM providers, is in the privacy notice.
Assurance
Claims we do not make
No certification claim
This page does not claim SOC 2, ISO 27001, HIPAA, PCI DSS, or another certification that has not been independently verified.
No universal data promise
Specific security, retention, residency, and deletion requirements belong in the signed agreement for the engagement. A DPA, subprocessor schedule, security questionnaire, MSA, and statement of work can be reviewed when relevant.
Have a security or data-handling question?
Describe the requirement before sending confidential information.
Start with a measured baseline.
AI answers vary. The Category Audit compares repeated observations and reports the disagreement, the sources visible in those answers and the changes worth testing first.
Get the Category Audit, $490Findings within 48 hours of your category confirmation. Refundable in full within 30 days of delivery.