techarda
⌕
Trust

For procurement, privacy and legal teams

If your organisation is reviewing Techarda before taking part in a programme, this page gathers what procurement, privacy and legal teams usually check, with a link to the full policy behind each point.

In short

Techarda is operated by Techarda from Sydney, New South Wales, Australia. Its database and web functions run in the United States (US East, North Virginia). Row-level security separates every account and company, administrator actions are written to an append-only audit log, data is deleted on a published schedule, and anything about people is shown only in groups of 5 or more. Companies cannot pay for ranking.

At a glance

The basics most vendor-onboarding forms ask for.

Operator
Techarda, Sydney, New South Wales, Australia
Contact
engage@techarda.com
Hosting region
United States, US East (North Virginia): database, authentication and file storage on Supabase (AWS us-east-1), web functions on Vercel in the same region. International transfers
Subprocessors
Supabase, Vercel, Microsoft 365 (email), Cloudflare (DNS only) and GitHub (source code, no user data). Full list with locations
Advertising and data brokers
None. No advertising or third-party tracking cookies, and no data-broker services.
Selling personal information
We don't sell personal information or share it for cross-context behavioural advertising. Details

The policies below are written for how Techarda actually works. If your onboarding needs the registered entity details, a data processing agreement or a security questionnaire, email engage@techarda.com.

Security practices in place

These are controls that run today, described plainly. The security section of the Privacy Policy covers encryption and breach notification.

Row-level security on the database

Every application table enforces row-level security in the database itself, not only in the application. Members reach only their own records, and a company's staff reach only their own company's rows. Raw reading and crawler events are administrator-only; companies see their own totals through functions that check membership first. A role-by-role boundary test is re-run after every schema change.

Browser security headers

An enforced Content Security Policy allows scripts only from Techarda itself, with no third-party scripts, frames refused and framing limited to our own pages. Pages also send nosniff, a strict referrer policy and a permissions policy that turns off camera, microphone, location and payment features. All traffic is served over TLS.

Sign-in and accounts

Sign-in is passwordless, by emailed link or code, with optional Sign in with LinkedIn. New accounts need a work email address, which the database checks when the account is created.

Audit log

Administrator moderation and editorial changes, company claim decisions, correction outcomes, sales-team access and administrator access to member records and exports are written to an audit log that clients can't edit or delete. It is kept for 2 years.

Consent model

Region-aware: in the EU and EEA, the UK, Switzerland, Brazil, India, South Korea and China nothing beyond strictly necessary cookies runs until the visitor chooses; elsewhere analytics is on with a one-click opt-out. Global Privacy Control and Do Not Track are honoured as an opt-out. Each choice is recorded in an append-only consent log. Cookie Policy

Groups of 5 or more

Anything that describes people, in reports, the vendor portal or the sales demo, is shown only when the group has at least 5 members. Other companies appear only as unnamed points, and only when there are 5 or more. A member's details reach a company only when that member asks for it, for example by requesting contact.

Retention schedule

Deletion runs automatically every day. Account data is kept while the account is active and deleted when the member deletes it.

DataKept for
Usage eventsIdentifiers removed after 13 months; events deleted after 25 months
AI crawler logs25 months
In-app notifications180 days
Unconfirmed sign-ups30 days
Consent records6 years, as proof of consent
Administrator audit log2 years
Privacy requests3 years after closure
Correction and takedown requests2 years after closure
Company claims2 years after the decision

The Privacy Policy has the full schedule.

Independence and commercial relationships

Nobody pays for ranking. Companies can't buy placement, change their position or remove critical reviews, and that includes any company we work with commercially. Techarda has one commercial partner, Conversera, a demand-generation agency that uses only aggregated, consented signals and never sees who individual members are. Sponsored campaign pages it runs for its clients are labelled Sponsored. The commercial relationships disclosure sets this out in full, and the methodology explains how ranking and moderation work.

Corrections and takedowns

Every company, solution and story page has a “Suggest a correction” link. An editor replies within 5 business days, and factual corrections are published on the corrections log. Copyright notices follow the Copyright & Takedown policy, and privacy rights requests have their own form with statutory deadlines at Privacy requests.

Reporting a security issue

Email engage@techarda.com with the details and give us reasonable time to fix it before disclosure. The rules for good-faith research are in the Acceptable Use Policy.

Policies and their versions

Each policy shows its change history at the foot of the page.

For live numbers on reviews, labelled vendor posts and profile freshness, see the trust dashboard. Companies listed here can read For technology companies.