Security & trust
How your data is stored, encrypted and handled. Stated plainly enough to be checked.
Last updated:
Technical Safeguards
We implement comprehensive security measures to protect your data and maintain your trust.
Encryption
Industry-standard encryption protects your data at all times
- Data encrypted at rest using AES-256 encryption
- All data transmitted via TLS 1.3 protocol
- Password vault items encrypted in your browser, and the key never leaves it
- Two-factor secrets encrypted with AES-256-GCM before storage
HSTS Enforced
HTTP Strict Transport Security prevents attacks
- HSTS headers enforced on all pages
- Prevents man-in-the-middle attacks
- Automatic HTTPS redirection
- HSTS preload list submission
Access Control
Strict authentication for all administrative access
- Multi-Factor Authentication (MFA) mandatory for all admin access
- Role-based access control (RBAC)
- Regular access reviews and audits
- Automatic session timeout policies
Incident Response
Rapid response protocol for security events
- 72-hour breach notification protocol
- Dedicated incident response team
- Regular incident response drills
- Transparent communication policy
Trusted Sub-Processors
We work with carefully vetted third-party providers who meet our strict security standards. Each sub-processor has been assessed for security, privacy, and compliance.
| Provider | Purpose | Location |
|---|---|---|
| Netlify | Hosting & Infrastructure | Global |
| Supabase | Database & Authentication | EU/US |
| Stripe | Payment Processing | US (PCI-DSS Compliant) |
| Cloudflare | CDN & DDoS Protection | Global |
| Google Analytics | Website Analytics (with consent) | US |
Form Data Security
All data submitted through our enquiry forms and contact forms is:
- Encrypted in transit using TLS 1.3
- Encrypted at rest using AES-256
- Stored on secure, UK GDPR-compliant servers
- Accessible only to authorised personnel with MFA
For more information about how we handle your data, please read our Privacy Policy.
Security Enquiries
Have questions about our security practices? Need documentation for your security review? Contact our team.