Trust Centre
Security, privacy and responsible AI, in plain view.
How we protect client data, the security practices behind every engagement and the regulations we build to.
Regulations
Compliance we build in
We help clients meet these and build our own work to the same standard. Readiness work does not replace certification by an accredited body.
Security practices
How we handle your systems and data
- Least privilege access
- Engineers get only the access a task needs, through single sign on with multi factor authentication.
- Secure development
- Senior review, dependency, secret and code scanning on every pull request.
- Data minimisation
- We work with the least personal data possible and prefer masked or synthetic data in development.
- Your environment first
- Where data is sensitive, we work inside your own cloud accounts or servers.
- Confidentiality
- NDAs on request, confidentiality terms in every contract and need to know access within teams.
- Incident readiness
- Named owners, a written response plan and notification to affected clients without delay.
Responsible AI
Rules our AI work follows
- No training on your data
- We use enterprise model terms that exclude training on client data, or open weight models on your infrastructure.
- Humans in the loop
- Risky actions go to a person until the numbers show it is safe to automate.
- Evaluated and monitored
- Every AI system has test sets, quality monitoring and cost controls.
- Transparent
- People are told when they are talking to an AI, and assistants that answer from documents show their sources.
Read our full responsible AI statement.
This website
- No advertising or tracking cookies
- Cookieless page analytics that never identify you
- Form data sent only to our team by email
- Strict security headers and HTTPS everywhere
- One preference stored in your browser: light or dark theme
Run compliance every day with TrustOS
Our DPDP compliance platform keeps consent, data principal rights, breach response and audit evidence in one place.
Explore TrustOSQuestions
Common security questions
Will you sign our NDA and data processing agreement?
Yes. We review and sign NDAs and data processing agreements before any confidential discussion or data access.
Where is our data stored?
In your own cloud or servers wherever possible. When we host, we agree the region and provider with you in writing.
Are you certified?
We help clients prepare for certifications and follow the same practices ourselves. Ask us for our current security pack for details.
Do you use client data to train AI?
No. Client data is never used to train public models.
Start a conversation
Need answers for a security review?
Send us your questionnaire. Our answers include any gaps and our plan to close them.
A specialist replies within one working day. The first conversation is free.