We operate under strict, version-controlled security policies approved by leadership. Every member is trained and acknowledges these policies, and we maintain a compliance register to ensure alignment with all legal and contractual requirements.

Security starts with our people. We carry out background checks where appropriate, provide mandatory onboarding and annual refresher training, and enforce clear procedures. When roles change or staff leave, access is revoked immediately and assets are recovered securely.

Our systems are protected through multi-factor authentication, automated patching, and malware protection. We encrypt backups, monitor networks for anomalies, and keep development, testing, and live environments separate with built-in security checks and regular penetration testing.

We secure our office locations and equipment with layered access controls, visitor logging, and clear-desk practices. Company devices are encrypted, and when no longer needed, they are securely wiped or destroyed to prevent any risk of data exposure.

We’re independently certified to ISO/IEC 27001:2022, with regular audits to keep our security standards up to date.

Your data is never shared for marketing, and we only use it for AI if you ask us to and give permission.

Our AI is carefully managed, and we test regularly for fairness and bias, flagging when content is AI-generated.

Your information is stored securely in the UK, with encrypted backups and strong protections for data in transit.