Security

• TLS in transit and encrypted storage for application data at rest.
• Role-based access within each organisation workspace.
• Automated backups and restore procedures operated by the platform team.
• EU/UK hosting options aligned with customer residency expectations.
• Hash-chained activity logs (rolling out) to detect tampering with audit history.

Formal ISO 27001 / SOC 2 reports are on the roadmap — ask us for the current security pack and subprocessors list rather than assuming attestations are published.