/trust
How we look after your data.
In plain English. No legalese, no surprises.
Cyber Essentials
We hold a current Cyber Essentials certification — the UK Government's baseline cyber-security standard. Renewed annually. Cyber Essentials Plus is on our backlog for 2026 H2.
Where your data lives
We host on Vercel (London region) and Supabase (London region). Your operational data never leaves the UK or EU. Backups are encrypted at rest. We don't sell, share, or resell client data.
GDPR compliance
We're a registered data controller for our own marketing communications and a data processor for any client data we handle on your behalf. A signed Data Processing Agreement (DPA) is part of every engagement that touches client data.
AI usage
We use OpenAI, Anthropic, and self-hosted open-weight models depending on the task. We never train AI on your data without explicit, written consent. We minimise prompts to the data strictly needed for the task.