Trust
Trust center
Everything an auditor or buyer needs to evaluate Cavaridge — in one place, kept honest.
Security
Posture, attestations, BAA stance, data flows, tenant isolation.
Sub-processors
15 vendors, 0 reviewed by counsel.
Privacy
Privacy policy, GPC handling, retention windows, data subject rights.
System status
Live indicators, latency, incident history, postmortems.
BAA request
Healthcare suite is gated on BAA — request and intake form.
Vulnerability disclosure
Scope, safe harbor, severity grid, contact details for researchers.
Public roadmap
Now / Next / Later. Every item links to a tracked issue.
Terms
Master Services Agreement summary, acceptable use, SLA target.
AI Addendum
How Cavaridge AI handles your data, output disclaimers, training stance.
Last sub-processor reconciliation: 2026-05-05. Operator + legal sign-off: pending.
Material changes to sub-processors are notified to BAA-covered tenants at least 30 days in advance.