Trust Center
Everything a reviewer checks, in one place.
The companies behind Expandware, the credentials we hold, how we protect what you trust us with, and the policies that govern the work. Each one is linked to its source.
Registrations
The companies you would contract with.
Every company in the group, with the public register it can be checked against. Nothing is stated here that has not been confirmed.
-
Expandware Private Limited
Incorporated in Pakistan and certified as a Special Technology Zone Enterprise.
-
Register
Securities and Exchange Commission of Pakistan
-
SECP CUIN
0351555
-
Role
Delivery from the certified facility, and the company clients contract with
-
Registered office
House No 2, Street No 1, Garden Town, Girls College Road, Bahawalpur 63100, Punjab, Pakistan
-
-
Expandware Corporation
A Delaware corporation.
-
Register
Delaware Division of Corporations
-
Role
The company clients in the United States contract with
-
Every claim on this site comes with the place to check it.
Credentials
Credentials we hold, by issuer.
Listed by the body that issued each one, so you can check it with them. Products we work with are named on service pages as technology, never as partnerships.
-
STZA, Government of Pakistan
Special Technology Zones Authority
-
STZA Zone Enterprise Certification
-
-
AWS Partner Network accreditations
Amazon Web Services
-
Technical Accredited
-
Sales Accredited
-
Generative AI Sales Specialized
-
Modernizing SAP
-
-
Microsoft Partner Network
Microsoft
-
Microsoft Partner
-
-
GitHub Certified professional credential
GitHub
-
GitHub Foundations
-
-
Partner program
DigiCert
-
DigiCert Partner
-
Security
How we protect what you trust us with.
-
A certified facility
Delivery runs from a Special Technology Zone facility under a government mandated security framework: zero-phone production floors, biometric access and monitoring of the production environment.
-
Access you grant
We work in your environments through access you grant per engagement and can revoke, with least privilege and logging, rather than copying your systems into ours.
-
Data loss prevention
Network level data loss prevention on workstations, segmentation between service tiers, and encryption in transit.
-
Aligned, not claimed
Technical and organizational measures are aligned to SOC 2 criteria. We do not claim a certification we do not hold, and say so where it matters.
-
Breach notification
Where a personal data breach is likely to put your rights at risk, the supervisory authority and you are notified within the period the applicable law requires.
-
Responsible disclosure
Security researchers have a published route to report a vulnerability, a security.txt file, and good faith protection for reports made in line with the policy.
Data protection
Privacy, by region.
Expandware Private Limited is the controller of the personal data this site collects. Questions and requests go to legal@expandware.com.
Your rights where you are
-
United Arab Emirates
UAE Personal Data Protection Law, and the DIFC and ADGM regimes
United Arab Emirates home
Policies
Every policy, in one list.
CONTACT
Ask for the contract pack.
The master services agreement, the data processing agreement and the service level agreement, before you commit to anything. Tell us what your review needs and we will send what applies.
- Senior-led
- Accountable
- Direct
- Fixed-price options
- Compliance-ready
- 24/7 capable
Prefer to talk it through? Call +92 (333) 32 11011
What happens next
-
You pick the time
We schedule the call at your convenience, not around our pipeline.
-
Thirty minutes, with an engineer
A direct answer on what we would do and whether we are the right fit at all.
-
A written assessment
A technical assessment and proposal, and the document is yours either way.