Security and compliance

We build security and compliance in from day one. Here is what we hold, what we follow and how we build.

What we hold and follow

  • Cyber Essentials Plus certified

    Cyber Essentials Plus is a UK government-backed certification. It means our security controls were tested by an independent assessor.

  • Aligned with ISO 27001

    We follow ISO 27001 controls.

  • Built to comply with POPIA

  • Built to comply with GDPR

How we build securely

Review

We review code before release, including code written with AI tools.

Testing

We test what we build and put security scanning around AI-written code.

Access control

We limit access to systems and data to the people who need it.

Secrets handling

We keep passwords, keys and other secrets out of the code.

Data handling with AI tools

We set rules for what data may be sent to AI tools and what may not.

How we handle personal data

Our software is built to comply with POPIA and GDPR.

We plan for personal data from day one: what a system collects, where it is stored, who may access it and where it may be sent.

Security questions

Have a security question? Send it to us through the contact page.