Enterprise · Trust Center

Audit-grade by default,
procurement-ready by design.

Every case signed, every write-back logged, every number traceable to the SQL, the model card, and the named approver.

Every case is signed.
Every write-back is attributable.

Detection to approver, signed. The log streams to your SIEM. Reproduce any conclusion in one click.

Built to survive your security review, because it was built for it.

Signed & reversible
Every case has an owner, a deadline, and a signed approver
Reads are read-only. Writes gate on a named human in a role you defined. Charters and policies live in your repo, so any change rolls back in one click.
Logged & attributable
SIEM-grade audit stream, with the math on every number
Tamper-evident JSONL to Splunk, Datadog, or your SIEM. Click any forecast or shrink flag and re-derive it from the SQL, sources, and model card.

The short list, on the table.
Before you sign.

Control
Status
Detail
SOC 2 Type II
Underway
Letter from auditor available under NDA. Type I issued.
ISO 27001
On the roadmap
Targeting certification within 12 months of SOC 2 II issuance.
GDPR / CCPA
Ready
DPA, DPIA template, sub-processor list current. EU representative engaged.
Data residency
Ready
US, EU, JP regions. Region-scoped policy enforced via Cedar.
Customer-managed keys
Ready
KMS or HSM-backed envelope encryption. Ward never sees the key material.
SSO / SAML 2.0
Ready
Okta, Azure AD, Google Workspace, Ping. Day-one provisioning.
SCIM
Ready
Automatic user provisioning and deprovisioning.
RBAC
Ready
Role-scoped via Cedar policy. Least-privilege, machine-enforced.
Cyber & tech E&O insurance
On file
AI rider included. COI to procurement in one business day.
Sub-processor list
Published
Notified at least 30 days before any change. Right to object preserved.

Pick the boundary that survives
your security review.

Tier 1
Multi-tenant SaaS

Fastest path to first case. Region-scoped, customer-managed keys, full audit stream to your SIEM.

  • Time to first case · 48 hours
  • Data residency · US / EU / JP
  • Tenant isolation · Cedar-enforced
Tier 2
Customer VPC

Single-tenant in your AWS or Azure account, deployed via PrivateLink and Terraform.

  • Time to first case · 2 weeks
  • Network · PrivateLink, no public ingress
  • Identity · your IAM, your role assumption
Tier 3
On-prem connector

For when data cannot leave the perimeter. The connector runs in your DC and the control plane never sees raw data.

  • Time to first case · 4–8 weeks
  • Data egress · forecasts and metadata only
  • Compatible with air-gapped tiers
48 hrsTo first case, SaaS
3Residency regions
0Public ingress in VPC
CMKKeys you control

Tiered, on the page,
before procurement asks.

Native, write-back, or read-only. The directory says which, before procurement asks.

Tier 1 · Native
We own the contract. Reads, writes, and audit-log delivery handled in-house.
Manhattan Active Omni Blue Yonder SAP Retail (S/4HANA, MM, CAR) Oracle Retail (RMS, ROFO) Relex Snowflake Databricks
Tier 2 · Write-back
Approved write paths. Every mutation gates on a named human and lands in the audit log.
Coupa SAP Ariba JDA / BlueSpace Pricing engines (Revionics, dunnhumby) Promo engines (IBM Promo, in-house) NetSuite Workday (HR / labor)
Tier 3 · Read-only
Federated reads. Data stays put; Ward never mutates these sources.
NielsenIQ Circana (formerly IRI) BigQuery Redshift Power BI / Tableau / Looker Salesforce Commerce Cloud Shopify Plus

Pre-agreed metrics.
Pre-agreed plays.
Pre-agreed close criteria.

Three playbooks, the KPIs they move, the threshold each must clear. Agreed up front, so there is no value debate at month four.

If the KPIs clear, you sign the MSA. If not, we walk.

Twelve weeks: connect, run in shadow, turn on write-backs, score against day-one thresholds.

Twelve weeks, four dates, one number.

Connect, find, act under approval, then score against the threshold agreed on day one.

  1. 48 hours
    First insight cards

    From a read-only connection. Findings on your own data, not a sandbox and not a slide.

  2. Week 2
    Findings ranked by dollars

    Stores, SKUs and vendors ranked by what they cost you, with the cause named and the SQL one click under every number.

  3. Week 6
    First gated write

    One playbook, one system of record, blocked on an approver role you named. Everything before this is read-only.

  4. Day 90
    The number, either way

    Measured KPI delta against the metric agreed on day one. If it did not move, the pilot ends.

What it costs
$24K – $240Kper year

Tier follows stack complexity: how many systems have to talk to each other, how many brands you run, and how custom your schema is. Not headcount, and not revenue.

  • Month-to-month, 30 days notice
  • No rollover clause
  • Every tier is the full platform

Control AI spend by department and user.
Without skimping on the outcome.

Give every department and every user a compute budget. Ward routes each question to the cheapest model that clears the quality bar, so finance caps the spend without capping what the business gets back.

Compute budgets, this month 68% used · on pace
Merchandising
14,200 / 20,000
Supply Chain
9,800 / 15,000
Store Ops
6,100 / 10,000
Ecommerce
4,700 / 5,000
Finance
3,400 / 5,000
Per-user caps. Alerts at 80%. Hard stop or overage approval, your call. Ecommerce flagged at 94%, before it became a surprise invoice.

Your security review starts here.

Architecture, MSA, DPA, SOC 2 letter, COI. On the table before you sign.

Read-only to start · your LLM keys · SOC 2 Type II underway · or book a call directly

Find out what your data has been hiding.

Tell us about your operation. We’ll show you the problems Ward catches, and the ones your current tools miss.

Step 1 of 3
What are your goals?
Step 2 of 3
About your operation
Step 3 of 3
Your contact info