Security & data protection
How we approach security and personal-data protection when designing and operating client software.
Hosting
We use managed cloud infrastructure for our hosted solutions. The specific infrastructure provider, deployment region, sub-processors and data-residency arrangements are confirmed for each client implementation. UK data residency should only be stated where it is contractually agreed and technically verified.
Encryption
Our solutions are designed to protect information using encrypted HTTPS/TLS connections and encryption for stored data where provided by the agreed hosting architecture. Specific controls are documented as part of the relevant deployment.
Access control
Role-based permissions help ensure users only access records and functions appropriate to their responsibilities.
Audit trail
Relevant changes, actions and approvals can be logged for traceability, with the exact scope of audit logging confirmed for each platform and module.
Backups & recovery
Backups, retention periods and recovery arrangements are set according to the hosting configuration and client service agreement. Contact us for details relevant to your deployment.
Data protection
We design our workflows with UK GDPR requirements in mind. Data-processing terms and relevant sub-processor information can be shared as part of a customer engagement.
Security assurance
We can discuss our security controls, testing and accreditation roadmap during supplier due diligence. Please do not describe Beyond Ops Ltd as independently ISO 27001 or Cyber Essentials certified unless documentary certification is provided.