Skip to main content

Security & Compliance

Security is at the heart of everything we build. Our products are designed, tested, and certified to meet the highest standards required by the public sector.

ISO 27001

UKAS-approved certification held since July 2020. Independently audited information security management system.

Cyber Essentials Plus

Certified to the UK Government's Cyber Essentials Plus standard, demonstrating robust cybersecurity practices.

PCI Compliance

PCI-compliant payment processing through Stripe and SagePay for all financial transactions.

Penetration Testing

Regular penetration testing by CHECK-certified third-party security specialists.

UK Data Centres

All data hosted in UK data centres, ensuring full data sovereignty and compliance with UK regulations.

Data Retention

Clear data retention and termination policies. 93-day data access window post-contract for orderly transition.