Skip to content

Security

Security at Aboard

Aboard builds and operates software for clients in regulated industries, including healthcare and insurance. Security is part of how we deliver that work, not a step we add at the end.

Security lead

Peter Bardawil

Director of Engineering, Aboard

Peter leads Aboard’s security function and is accountable for the security of the software Aboard builds and the systems Aboard operates.

He has more than ten years of experience in software engineering, cloud architecture, and DevOps, and delivered the keynote “Data Collaboration Without Exposure” at AWS Community Day Lebanon 2026.

Scope

What the security function covers

  • Secure design and architecture review for every engagement
  • Code security review and vulnerability identification across Aboard’s products and client applications
  • Remediation and patch validation
  • Infrastructure and cloud security for the systems we operate
  • Incident response and coordination with clients
  • Responsible disclosure handling

Aboard’s engineering team in New York and Beirut works under this function. Security review is built into our delivery process, and our solution engineers review and validate AI-generated work at every stage.

Practice

How we work

For regulated workloads, Aboard designs controls in from the start. Depending on the engagement, that includes:

  • Organization-level data isolation in multi-tenant systems
  • Role-based access control
  • Encryption of data in transit and at rest
  • Audit logging
  • HIPAA-compliant infrastructure where required

Every engagement includes ongoing support, with monitoring, reliability, and performance management of the systems we build.

Responsible disclosure

Report a vulnerability

If you believe you have found a security issue in an Aboard product or in a system Aboard operates, email security@aboard.com. We acknowledge reports promptly and work with you on a fix. Please do not publicly disclose an issue until we have had a chance to address it.

This page is Aboard’s vulnerability disclosure policy, referenced from aboard.com/.well-known/security.txt.