Hosting
UK/EU data centres with redundancy and daily backups.
Encryption
TLS in transit; AES-256 at rest.
Access control
Role-based access, MFA available, full audit trail.
Backups & retention
Point-in-time restore and clear retention policy.
Privacy
We never sell customer data. DPA available on request.
Sub-processors
List available and kept up to date.
Availability
High-availability architecture and monitoring.
Incident response
Documented process; we’ll notify you promptly if anything occurs.