Security and trust

Named sign-in. A record of every change. Data held in the UK.

You are accountable for what happens on your network. The system you use has to show what was done, and who did it.

Sign-in

Everyone signs in as themselves.

Your staff sign in with their own organisation's Microsoft account. There are no shared logins and no new passwords. Your administrators decide who gets in and who can publish, and can take anyone off again. The access questions on a supplier assessment get short answers.

The record

Every change has a name and a time on it.

Publishing, uploads and decisions are logged the moment they happen, against the person who made them. A decision also keeps the person's role, and whether it was made on the map or the review page. When a complaint or a freedom of information request comes in, you answer it from the log.

Where it is held

Stored in London, and yours to take away.

Your data is stored in the UK, in London, with AWS and Supabase. It is encrypted in transit and at rest, and copied every night to a separate store. It is yours, and you can have all of it, in full, whenever you ask. Our written DPIA answers cover the rest, including the two services we use outside the UK.

How long it is kept, and how you get it back.

Withdrawn orders and schemes are kept, not deleted, so the record of what was in force stays.
How long records are kept is agreed with you in the data processing agreement, to match your own policy.
When the contract ends, we return your data in a common format or delete it, whichever you choose, and confirm it in writing.

We will fill in your forms.

Send us your security questionnaire, DPIA template or supplier assessment. We already have a data processing agreement and written answers for your DPIA.

Ask us the difficult questions.

We would rather answer them now than at contract stage.

Ask about security and data