When you close your account, your data is permanently deleted. Backups are encrypted and held in the United Kingdom.
We share personal data only with the subprocessors listed on this page, and we keep that list current.
About Goodman
Compliance is a question of evidence.
We scan your code and infrastructure, flag the compliance and security risk, and advise on the fix. Not a law firm — careful about the difference.
Why Goodman existsPrivacy policy · §4As published
We read the policy. Then we read the product.
What the product does
Uploaded files stay in object storage after the account is gone.
EV-0412Snapshots are copied nightly to us-east-1.
EV-0423Eleven vendors receive data. Ten are listed.
EV-0398How we work
Everything we say lands on the desk first.
01 / 06
We read the code.
Every file, every dependency.
Where this is goingRegistry record · GM-R-2026-0147Example
Scan. Panel. Record.
- Product
- app.northwind.example
- Scope
- Web app · production · eu-west-2
- Assessed
- 02–15 Sep 2026
- Review due
- 15 Mar 2027
- Now
Scan
Code and cloud read, risk flagged, documents drafted.
- Next
Panel
Judgement calls go to a vetted lawyer, evidence attached.
- Then
Record
Scoped, dated, re-tested — and readable by a buyer.