BWN-POL-CORE-001

Bawin Limited — Company Core Policy

Document: BWN-POL-CORE-001
Document control: Edition 4.0 · supersedes Edition 3.0 of 2026-07-28 · approved 2026-08-12
Effective: 2026-08-12
Next review: 2027-08-12
Approved by: the sole director, Bawin Limited
Company number: 17307761
Registered: England and Wales · 167–169 Great Portland Street, 5th Floor, London W1W 5PF

One of five controlled documents in the Core Policy Suite — see the whole suite.

STAGE ONE

WHOLENESS

Nothing hidden, nothing partial, nothing quietly withdrawn.

Completeness of disclosure

Where a fact bears on whether a reader should believe Bawin, it is published in full or not claimed at all. A partial disclosure is treated as a defect of the same class as a wrong number. Unresolved matters are published as unresolved.

Declared interests

Every material interest of an officer that a reasonable, informed third party would regard as bearing on independence is entered in the register below and on the method page, with the controls applied to it and any clearance still outstanding.

Corrections are published, not deleted

The trust log is append-only. A correction is a new dated entry naming what was found wrong, not an edit to the entry that was wrong. No entry is redated, softened or removed.

Independence

Bawin sells nothing to the organisations it reads beyond the reading itself, takes no consideration from any body that certifies against a framework it maps, and treats a perceived conflict as a conflict.

No number without evidence

No index, score or state is displayed anywhere — marketing surface included — unless it was computed from evidence that is connected and dateable. Where there is no evidence, the surface shows an em dash and says why.

GATE 1WHOLENESS

METDeclared-interests register published in full, including the unresolved item.
METCorrections published as new dated entries; nothing deleted or amended in place.
METNo number displayed anywhere without the evidence it was computed from.
OPENWritten impartiality clearance held from the certification body's impartiality function. Sought, not yet held. Disclosed as outstanding rather than omitted.

While Gate 1 is open, Bawin issues no live reading to a paying customer.

STAGE TWO

STABILITY

The same inputs produce the same answer, today and in five years, in anyone's hands.

The invariant

A published reading must be recomputable from the published method, the stated edition and the connected evidence, by someone who does not work here. Anything that cannot survive that test is not published.

Reproducibility over authority

Bawin's conclusions carry no weight because Bawin reached them. They carry weight because the arithmetic is published and can be checked. Where the two conflict, the arithmetic wins and Bawin is corrected.

Security as precondition

Read-only, least-privilege access; UK/EU residency; encryption in transit and at rest; no secondary use of customer evidence. These are conditions of operating, not features of a tier. Controls and their Annex A references are published in the trust centre.

Correction before extension

A known defect is closed before new scope is added. Frameworks, features and customers wait behind corrections; the release that fixes nothing and adds much is refused.

Human judgement remains with the customer

Bawin resolves evidence against clauses. It does not certify, does not sign an audit opinion, and does not decide whether an organisation is compliant. That judgement stays with the customer, their auditor and their counsel.

GATE 2STABILITY

METThe invariant gate runs against served output on every release and blocks a failing build.
METFactors, weights and edition published, so any reading can be recomputed by hand.
METSuperseded editions retained and publicly reachable; nothing re-baselined silently.
OPENIndependent external penetration test completed and its summary published. Scheduled Q4 2026.

STAGE THREE

ASCENSION

Growth that the earlier stages can carry.

What growth is for

Scale exists to make the method cheaper to run and harder to corrupt, not to make the claims louder. Revenue that would require a quieter disclosure is not revenue Bawin wants.

Growth that does not compromise the earlier stages

No commitment in Wholeness or Stability is relaxed to win an account, close a round or enter a market. If a growth path requires one to bend, the growth path is dropped and the reasoning is published.

What Bawin refuses

The refusals below are absolute and are stated so that a customer, a regulator or a competitor can hold Bawin to them. They are listed in full further down this page.

GATE 3ASCENSION

OPENGates 1 and 2 closed before any paid live reading is issued.
OPENIndependent reviewer appointed to the method, with published terms.
OPENBawin's own posture read by Bawin's own method and published. Targeted Q4 2026.

What Bawin refuses

Nine refusals. Absolute, quotable in procurement without our consent, and falsifiable.

01To sell remediation, advisory, implementation or audit preparation to any organisation whose posture it reads.
02To accept referral fees, commission, revenue share or listing fees from certification bodies, auditors, assessors, insurers or tool vendors.
03To let payment purchase, accelerate, suppress or influence any reading, mapping or coverage decision.
04To publish a number that cannot be recomputed from the published method and the connected evidence.
05To describe itself as certified, accredited or approved, or to let another party describe it that way unchallenged.
06To delete a correction, redate an entry, or amend a published statement in place.
07To use customer evidence to train a model, to benchmark another customer, or to build a public directory of readings.
08To move customer evidence outside the residency the customer chose in order to reduce cost.
09To keep a commitment quiet when it becomes commercially inconvenient, rather than publishing the amendment.

Governance of this policy

Escalation route

Any person may challenge a reading, a mapping, a method decision or a public claim by writing to contact@bawin.co. Concerns may be raised anonymously; Bawin does not attempt to identify a reporter and takes no detrimental action against anyone raising a concern in good faith. Substantive objections and their resolution are logged in the public trust log, including where the objection is upheld against us.

Precedence

This policy sits at the head of the Core Policy Suite (BWN-SUITE-001, Edition 1.0, issued 2026-08-12). Where it conflicts with any other document in the suite, or with any internal document, this policy prevails until the other document is amended and this one is republished. The full suite is listed at /policy/suite.

Change and publication

This policy is reviewed at least annually, and immediately on any change to the company's structure, ownership, revenue model or the declared interests of its officers. Every amendment increments the edition, is published with its reasoning in the trust log, and leaves the superseded edition publicly reachable. Where a commitment becomes commercially inconvenient, the response is to change the business or publish the amendment — never to stop honouring it quietly.

Declared interests register

The same register rendered on Method §07, from the same registry record.

Officer: The sole director of Bawin Limited
Organisation: British Standards Institution · certification body
Role: auditing role covering management system schemes including ISO/IEC 27001
Conflict: Bawin Limited operates a product that scores evidence against ISO/IEC 27001 among other regimes. A reasonable, informed third party would regard that as a conflict, and Bawin treats it as one.

Controls in force

—Standing recusal. That officer takes no part in any reading, crosswalk, coverage decision or Signal item concerning any organisation they have assessed, are assessing, or may be assigned to assess. Each application is logged individually in the trust log.
—No cross-issuance. No Bawin reading is issued to any organisation within that officer’s assessment portfolio.
—No influence on method. Weightings, the control spine and published crosswalks concerning ISO/IEC 27001 are reviewed against the test at §05 before publication, and that review is published with the change.
—No consideration. Neither Bawin nor its officers receive any consideration from the British Standards Institution in respect of Bawin, and the British Standards Institution holds no interest in Bawin Limited.

OPEN ITEM 01

Written confirmation of this arrangement from the certification body’s impartiality function, naming the ISO/IEC 27001 scoring feature specifically, is being sought. It is not yet held. It will be published here with its date when it is, and is disclosed as outstanding until then. Bawin declares an unresolved clearance rather than omit the interest.

No officer holds equity in, or receives any consideration from, any organisation Bawin reads or any vendor Bawin observes.

Recusals in force: 2026-08-12
Instances recorded: 0 · No live readings have been issued under any method edition to date.
Register reviewed: 2026-08-12
Review cadence: At least quarterly and on every change of officer role.

Edition 4.0 · supersedes Edition 3.0 of 2026-07-28 · approved 2026-08-12

BWNv2.1UK/EU2026-08-12

MakerMethodologyResidencyEvidence