Skip to content

Security & Compliance

Enterprise-grade security

Audited, isolated, encrypted, and recoverable. The proof points your security review already asks for.

Security and Trust

Six pillars of defense, governed by default

Identity, isolation, encryption, and recovery. Controls applied at every layer, never bolted on after.

ISO 27001:2022 Certified
Dedicated Subscription, Private by Default
Encryption Everywhere
Resilience by Design
Identity-First Access
Secure-by-Default Engineering

Independently audited. Certified to ISO 27001:2022. Verifiable on request.

01/06

ISO 27001:2022 Certified

An independently audited security programme, plus a privacy programme aligned with EU data protection. The standards your auditors and procurement team already test against.

  • Annual third-party audit against ISO 27001:2022 controls
  • GDPR-aligned privacy programme with a dedicated Data Protection Officer
  • Formal Data Subject Access Request procedures in place

Your own Azure subscription. Your own AI models. Your chosen region.

02/06

Dedicated Subscription, Private by Default

The strongest isolation boundary available. Dedicated subscription, dedicated model deployments, data in your chosen region. Nothing shared.

  • Dedicated Azure subscription: no shared compute, storage, or AI inference
  • Dedicated model deployments: no shared endpoints
  • Data residency in your chosen region
  • Private endpoints only: no public exposure

Industry-standard encryption at rest, in transit, and through the data lifecycle.

03/06

Encryption Everywhere

  • AES-256 encryption at rest across every production data store
  • TLS 1.2+ enforced in transit
  • Customer data securely deleted within 60 days of contract end

30-minute recovery target. Multi-region by default. Near-zero data loss.

04/06

Resilience by Design

  • 30-minute recovery target (RTO) and 30-minute data-loss target (RPO)
  • Active-active multi-region deployment: no single point of failure
  • Geo-redundant backups with point-in-time recovery

Sign in with your own corporate identity. Mandatory MFA. Least privilege by default.

05/06

Identity-First Access

  • Single sign-on through your own Microsoft Entra ID: no separate passwords
  • Mandatory multi-factor authentication for all administrative access
  • Least-privilege access by default: your team controls who sees what
  • Access reviewed continuously, revoked automatically on role change

Every change reviewed and security-scanned before it ships. Continuously pentested.

06/06

Secure-by-Default Engineering

  • Every code change peer-reviewed and security-scanned before deployment
  • Continuous independent penetration testing
  • High-risk findings remediated within 30 days

Trust Center

One place for our security artifacts.

Current certifications, policies, and our sub-processor list, kept up to date in the Trust Center. Share access with procurement and security reviewers when they need it.

Visit Trust Center

Inside your subscription

Architected for isolation

Your identity provider, your dedicated Azure subscription, your data. Fenced off behind private endpoints.

Your Microsoft Entra IDSingle sign-on with your corporate credentials
SSO
Your dedicated Azure subscription
Private endpointsNo public access
App
AI Models
Database
Storage
Key Vault
AES-256 at restTLS 1.2+ in transitMFA enforcedRegion of your choice30-day backups

ISO 27001:2022

Certified

30-min

RTO / RPO

AES-256

Encryption

Zero

Public endpoints

Enterprise-grade infrastructure, built for financial services.

Dedicated, isolated, and audit-ready by default.

Data handling

Your data stays yours

Plain commitments on how your data is stored, used, and shared.

Never used to train models

We don't use it to train shared or public AI models.

Never sold or shared

We don't sell it or share it beyond running your work.

Kept in your subscription

It's processed inside your dedicated subscription, by the vetted sub-processors listed in our Trust Center.