For IT & security
Built to clear your security review.
We've answered the questionnaire before. Tenancy isolation, encryption posture, audit log integrity, GDPR lawful basis, sub-processors, incident response. The policy pack is ready when you are.
ISO 27001-aligned ISMS
44-policy information security management system mapped to ISO 27001 controls. Certification in progress. Policy pack available under NDA.
ICO-registered, GDPR by design
Registered UK data controller. Data minimisation, purpose limitation and lawful basis baked into the data model — not a privacy policy retrofit.
Organisation-scoped multi-tenancy
Investigations, documents, and audit logs are isolated per organisation. Role-based access (viewer, editor, admin) enforced at the API and database layer.
Tamper-evident, exportable, deletable
Hash-chained audit logs you can export. Right-to-erasure honoured at the document and account level. Encrypted at rest and in transit.