Privacy and Security

We take our privacy and security responsibilities to you and your customers extremely seriously.

Cloud Security

Cloud security is the highest priority; we fully appreciate that the data shared with is of the upmost sensitivity. Our chosen cloud hosting partner is Amazon Web Services, by partnering with AWS we can ensure we are operating on data centre and network infrastructure that is built and maintained by security experts.

All data is stored in the AWS London region.

It goes without saying that all communications with the APIs and portals is over a secure channel (HTTPS) and ensured by HTTP Strict Transport Security.

Penetration Testing

To provide third party assurances and verifcation that our systems are secure we conduct regular penetration tests using external consultants.

You can download our latest test results here conducted in June 2021.

ICO Registration

As a data processors of sensitive personal information Limited is required to be registered with the Information Commissioner's Office on the Data Protection Register. You can confirm our registration details at any time on the ICO website here, our registration number is: ZA283680

GDPR Compliance Limited is fully compliant with the upcoming GDPR legislation that comes into full effect May 2018. Please refer to section 10 of Service Access Terms and Conditions for full details.

ISO 27001

ISO 27001 is an internationally recognised standard in Information security management systems. Limited is aggressively pursuing accreditation which we hope to have by early next year.