Business and contact information
Company name, public website, category, approved competitors, project contacts, billing records, and the information needed to scope and deliver the engagement.
Security and data handling · reviewed August 22, 2026
Clear boundaries for client information.
Broadcastwell’s work begins with measurement, which can involve submitting approved company facts and buyer questions to AI-search providers. This page explains the operating controls and the limits of the public commitment.
Need-to-know accessNo credentials required for a standard auditDeletion requests supportedNo unclaimed certifications
Scope
What we collect—and why
Measurement inputs
Approved buyer questions, public company facts, observed AI answers, citations, timestamps, engine names, and repeat-run records used to create the baseline and subsequent reports.
Implementation material
Approved content drafts, source references, analytics exports, screenshots, and other materials a client chooses to provide for the agreed work.
What a standard audit does not need
Passwords, API keys, customer records, regulated health data, payment-card data, or other high-risk information. Do not send such data unless a separate written scope and control plan has been agreed.
AI provider use
What can be placed into prompts
Operating controls
How access and retention are handled
Access
- Limited to personnel working on the relevant engagement.
- Authenticated accounts and, where supported, multi-factor authentication.
- Least-access approach for client workspaces and exports.
- No request for shared personal passwords.
Retention and deletion
- Information is retained while needed to deliver the work and maintain the agreed record.
- Legal, tax, accounting, or contract obligations may require limited continued retention.
- Clients may request return or deletion of eligible project information.
- Deletion requests are confirmed after applicable obligations are checked.
Confidentiality
- Client confidential information is used only for the agreed engagement.
- Public case studies require explicit approval.
- Credentials and sensitive third-party data are excluded from public materials.
- Contract terms control if they differ from this public summary.
Incident reporting
- Suspected exposure is escalated for assessment and containment.
- Affected clients are notified as required by the governing contract and applicable law.
- Evidence is preserved where appropriate for investigation.
- Security questions and reports go to hello@broadcastwell.com.
Relevant providers
Current public subprocessor summary
OpenAI / ChatGPTUsed to observe eligible AI-search answers during approved audits and monitoring. Prompts may include a company name, public company facts, category wording, and buyer questions.
Anthropic / ClaudeUsed for the same measurement purpose when included in the agreed four-engine scope.
PerplexityUsed for the free mini-audit and, when agreed, for paid multi-engine measurement.
Google AI search experiencesUsed to observe eligible Google-generated answers where available in the agreed measurement scope.
FramerHosts and delivers the public Broadcastwell website. Website data is subject to the linked privacy and cookie notices.
The exact provider set can vary by engagement, availability, geography, and agreed scope. Contract documents and the statement of work control. Provider terms and data practices also apply when their systems are used.
Assurance
Claims we do not make
No certification claim
This page does not claim SOC 2, ISO 27001, HIPAA, PCI DSS, or another certification that has not been independently verified.
No universal data promise
Specific security, retention, residency, and deletion requirements belong in the signed agreement for the engagement. A DPA, subprocessor schedule, security questionnaire, MSA, and statement of work can be reviewed when relevant.
Have a security or data-handling question?
Describe the requirement before sending confidential information.