Skip to main content

Security & Compliance

Security is at the heart of everything we build. Our products are designed, tested and certified to meet the highest standards required by the public sector.

ISO 27001

UKAS-approved certification held since July 2020. Independently audited information security management system.

Cyber Essentials Plus

Certified to the UK Government's Cyber Essentials Plus standard, demonstrating robust cybersecurity practices.

NHS DSP Toolkit

Standards Exceeded status for 2025-26, the highest available rating. Our assessment is publicly available on the NHS register.

PCI Compliance

PCI-compliant payment processing through Stripe for all financial transactions.

Penetration Testing

Regular penetration testing by CHECK-certified third-party security specialists.

UK Data Centres

All data hosted in UK data centres, ensuring full data sovereignty and compliance with UK regulations.

Data Retention

Clear data retention and termination policies. 93-day data access window post-contract for orderly transition.