Security & Compliance

Enterprise security, independently verified

We don't just claim to be secure — we prove it. ISO 27001 certified, Cyber Essentials Plus accredited, and designed to meet the most stringent regulatory requirements across every sector we serve.

ISO 27001 Certified

Independently audited information security management system covering all operations and client deployments.

UK GDPR Compliant

Full compliance with UK data protection regulations, including lawful basis assessments and data subject rights management.

Cyber Essentials Plus

Government-backed certification with independent testing of our technical security controls.

ICO Registered

Registered with the Information Commissioner's Office as both a data controller and data processor.

Security architecture

Encryption at Rest and in Transit

  • AES-256 encryption for all data at rest
  • TLS 1.3 for all data in transit
  • Client-managed encryption keys option
  • Hardware security modules (HSMs) for key management

Deployment Options

  • On-premise: deploy within your own data centre
  • Private cloud: UK-based dedicated infrastructure
  • Hybrid: sensitive processing on-prem, non-sensitive in cloud
  • Air-gapped: fully isolated environments for classified workloads

Monitoring & Incident Response

  • 24/7 security monitoring with automated alerting
  • SOC team with < 15 minute response time for critical incidents
  • Regular penetration testing by CREST-certified testers
  • Incident response plan tested quarterly

Access Control & Authentication

  • Multi-factor authentication enforced for all access
  • SSO integration with your identity provider
  • Role-based access with principle of least privilege
  • Privileged access management for administrative functions

Sector-specific compliance

FCA

FCA Compliance

Finance & Banking

Financial Conduct Authority guidelines for AI in financial services, including model risk management and consumer duty.

SRA

SRA Compliance

Legal

Solicitors Regulation Authority guidance on technology use in legal practice, including data protection and client confidentiality.

CQC

CQC Compliance

Healthcare

Care Quality Commission requirements for technology in healthcare settings, including patient data protection.

ICO

ICO Compliance

All Sectors

Information Commissioner's Office guidance on AI and automated decision-making under UK GDPR.

Need a security deep-dive?

Our Head of AI Safety can walk your team through our security architecture, certifications, and compliance posture.

No commitment required. Get a custom quote in minutes.