Broadridge Sentry
Loan management technology
broadridge.comEnterprise evidence
Procurement review neededPublic information covers sso & provisioning, auditability, reliability & support. Still unresolved: security assurance, access controls, data handling.
7 official sources · Fresh page review · Not independently tested
Sources reviewed 2026-10-16
4 / 7 areas with published evidence · 0 independently verified
Evidence & checks
Security assuranceMixed claims — review
- SOC 2 Type 2Reviewed 2026-10-16View source
• SOC 2 Type 2 unqualified opinion related to information security (Annually)Reviewed 2026-10-16View source
- SOC 2 + HITRUSTReviewed 2026-10-16View source
• There are two relevant categories of SOC reports: – SOC 1: Controls relevant to internal control over financial reporting – SOC 2: Controls relevant to one or more of the Trust Services Principles (Security, Availability, Processing integrity, Confidentiality, or Privacy).Reviewed 2026-10-16View source
Before relying on it
Request the current audit report, scope, exceptions and expiry; confirm the vendor entity.
SSO & provisioningCompany-published
The vulnerability affects Citrix NetScaler ADC and Citrix NetScaler Gateway deployments only when the relevant version and SAML configuration conditions are present.Reviewed 2026-10-16View source
For NetScaler ADC and NetScaler Gateway version 13.1, Citrix identifies deployments before 13.1-64.23 as affected only when configured as a SAML service provider or SAML identity provider.Reviewed 2026-10-16View source
Before relying on it
Test SSO enforcement, user removal and privileged-account recovery.
Access controlsNot found
Before relying on it
Test least-privilege roles and cross-tenant access with separate test accounts.
AuditabilityCompany-published
Broadridge provides perimeter controls to detect unauthorized access to work areas within Broadridge Facilities and creates an audit trail of all access attempts, whether granted or refused.Reviewed 2026-10-16View source
Before relying on it
Verify administrative and data-access events, retention and export.
Data handlingNot found
Before relying on it
Review DPA, subprocessors, retention, deletion, residency and AI training use.
Reliability & supportCompany-published
- Incident ResponseReviewed 2026-10-16View source
## Incident ResponseReviewed 2026-10-16View source
Before relying on it
Request SLA, incident history, recovery targets and support escalation terms.
Product effectivenessCompany-published
– The external auditors test Broadridge’s assertion that there is a 100% confidence level that the accuracy of Broadridge’s votes, in this category is, 100% – Vote transactions under the 50,000 threshold are reviewed internally via random testing, utilizing a statistical sampling method.Reviewed 2026-10-16View source
– The external auditors test Broadridge’s assertion that there is a 99% confidence level that the accuracy of Broadridge’s votes, in this category is, 99.8% includes Electronic and Paper ballotsReviewed 2026-10-16View source
Before relying on it
Run a representative pilot against your current workflow; measure errors, missed cases, time saved and human review cost.
Published claims are not verified controls. No hands-on performance or security testing has been performed.
What we know
Sentry loan portfolio management technology handles diverse loan varieties and integrated covenant workflow solutions; used by Socium Fund Services.
Worth asking
Can the solution scale to handle disparate loan varieties across both middle-market and broadly syndicated portfolios simultaneously?
Sources
- Broadridge - Broadridge | Global Leader - Financial Technology Solutionsbroadridge.com
- Broadridge Trust Center | Powered by SafeBasetrust.broadridge.com
- Broadridge - Security Capabilitieswww.broadridge.com
- Summary of Proxy Services Third-Party Reviewswww.broadridge.com
- Overview of Information Security and Global Privacy Programswww.broadridge.com
- Overview of Information Security and Global Privacy Programswww.broadridge.com
- Broadridge Information Security Annex 1. Information Security Program. Broadridge has in place a comprehensive information security program (“Information Security Program”) consistent with one, or a combination of: (a) the Control Objectives for Information and Related Technology (COBIT) framework, (b) International Organization for Standardization/International Electrotechnical Commission (ISO/IEC) 27001, (c) various National Institute of Standards and Technology (NIST) standards, (d) NIST Cybersecurity Framework, (e) the Payment Card Industry (PCI) Data Security Standard; (f) The Health Insurance Portability and Accountability Act (HIPAA) or (g) the Health Information Trust Alliance (HITRUST). The Information Security Program includes administrative, technical and physical safeguards to protect against anticipated threats or hazards to the confidentiality, integrity and availability of Client’s Confidential Information, including unauthorized use, access or disclosure. The Information Security Program is reviewed and assessed, no less than annually, for changing standards and anticipated threats and hazards. Based upon the results of that assessment, the Information Security Program and standards related thereto will be updated and approved by senior management. Broadridge will permit Client to review the Information Security Program documents and information during Client’s Annual Security Assessment (defined below). 2. Audit Reports and Certifications. For those services where Broadridge deems it appropriate, Broadridge will engage an independent external auditor to conduct annual reviews of Broadridge’s controls against appropriate controls framework, such as SSAE 18 (or its equivalent standard), ISO 27001, PCI, HIPAA or HITRUST, as applicable. Any material deficiewww.broadridge.com
Evidence details
Enterprise controls
5 - PCI DSS - PCI DSS v4.0.0 - SOC 2 + HITRUST - SOC 2 Type 2 - SOX • SOC 2 Type 2 unqualified opinion related to information security Broadridge receives SOC 1 Type 2 and SOC 2 Type 2 reports covering these products and services
Developer access
API availability has not been verified.
Last checked Oct 16, 2026
Company-published evidence, not an independent audit. Unknown means unverified.