What we do with your data.
Every claim below is marked with its current status: live, in progress, or on our roadmap. We don't claim certifications we don't hold.
UK data residency
Customer data hosted and processed in the UK, with no offshore processing of personal data.
UK-hosted infrastructure
Customer data hosted and processed in UK data centres.
On our roadmapUK-based backups and disaster recovery
Backups and disaster recovery kept within the UK.
On our roadmapNo offshore processing of personal data
Personal data is not processed outside the UK.
On our roadmap
Data protection
UK GDPR and Data Protection Act 2018 compliance, with support for landlords' own obligations.
UK GDPR & DPA 2018 compliance
Our processing is designed to meet UK GDPR and the Data Protection Act 2018.
On our roadmapICO registration
Registered with the Information Commissioner's Office.
On our roadmapData processing agreement template
A standard DPA available for landlords to review before signing up.
On our roadmapDPIA support for landlords
Support for landlords running their own Data Protection Impact Assessments.
On our roadmapRetention and deletion controls
Configurable retention periods and deletion controls for case data.
On our roadmapSubject access request support
Tools to help landlords respond to subject access requests.
On our roadmap
Security
Encryption, access control and ongoing testing.
Encryption in transit and at rest
TLS 1.2+ in transit, encryption at rest.
On our roadmapSSO and MFA
Single sign-on and multi-factor authentication for staff accounts.
On our roadmapRole-based access
Access scoped by role across the platform.
On our roadmapAudit logs
A full, immutable log of actions taken on case data.
On our roadmapIndependent penetration testing
Regular penetration testing by an independent third party.
On our roadmapVulnerability management
An ongoing vulnerability management programme.
On our roadmapSecure development lifecycle
Security built into our development process, not bolted on afterwards.
On our roadmap
Standards & frameworks
Certifications and framework alignment we're working towards.
Cyber Essentials
UK government-backed cyber security certification.
On our roadmapCyber Essentials Plus
The higher assurance tier of Cyber Essentials.
On our roadmapISO/IEC 27001
International information security management standard.
On our roadmapNCSC Cloud Security Principles
Alignment with the National Cyber Security Centre's cloud security guidance.
On our roadmapGOV.UK Technology Code of Practice
Alignment with the government's Technology Code of Practice.
On our roadmapGOV.UK Service Standard
Alignment with the government Service Standard.
On our roadmapG-Cloud listing
Listing on the G-Cloud framework.
On our roadmapWCAG 2.2 AA
The site and product are built to meet WCAG 2.2 AA.
In progressPublic Sector Bodies Accessibility Regulations 2018
Alignment with the public sector accessibility regulations.
On our roadmap
Resilience
How we plan to keep the service available when things go wrong.
Uptime target
A published uptime target, confirmed ahead of general availability.
On our roadmapIncident response
A documented incident response process.
On our roadmapBusiness continuity
A business continuity plan covering the platform and its data.
On our roadmap
Security overview
A downloadable summary of our security practices for your procurement process.
Coming soonRequest our security pack
Need more detail for your procurement or due diligence process? Tell us what you need.