Everything a security reviewer asks for, in one place, without an NDA conversation first.
Encryption
TLS 1.3 in transit, AES-256 at rest, keys rotated annually.
Access control
SSO, mandatory 2FA for staff, least-privilege roles and an audit log.
Continuity
Hourly backups, 30-day retention, restore tested every quarter.
Privacy
GDPR and UK GDPR aligned. Data residency in the EU or US, your choice.
SOC 2 Type II
Report available under NDA
ISO 27001
Certificate on request
Pen test
Latest summary: July 2026
| Provider | Purpose | Data |
|---|---|---|
| Cloud host, EU | Hosting and CDN | All customer content |
| Email delivery | Form and order emails | Recipient addresses |
| Payments | Card processing | Payment metadata |
Independently audited, encrypted end to end and designed for the strictest procurement teams.
SOC 2
Type II
GDPR
Compliant
ISO 27001
Certified
AES-256
At rest
Single sign-on
SAML and OIDC with SCIM provisioning.
Audit logs
Every action recorded and exportable.
Data residency
Choose US, EU or APAC storage.
Book a free 30-minute strategy call. We will map your fastest route to launch - whether you work with us or not.