Certification status
We are working toward alignment with ISO/IEC 27001 and will say exactly that until we are certified. We are not certified today, and we will not imply otherwise on a page like this.
What we can do now is complete your security questionnaire in full, walk your team through our controls on a call, give you the right to audit them in the agreement, and start with a pilot small enough that the risk is proportionate to what you know about us.
In your systems. Our staff work inside your TMS, portals and document stores through named accounts. We do not copy client data onto our machines, and local storage and downloads are disabled by configuration, not just by policy.
Yes. The right to audit our controls is written into our standard agreement, and we will host an inspection of the floor with reasonable notice.
We sign a data processing agreement incorporating the UK International Data Transfer Addendum or EU Standard Contractual Clauses before any personal data is shared, and we document the categories of data involved.
A documented offboarding checklist: access revoked within four hours, any client materials returned or destroyed to your instruction, and written confirmation from us that it has been done.
Liability is set out in the signed agreement, which your lawyer should review. We carry the obligations we agree to and we will not hide them in a website footnote.
Next step
We complete it in full before you commit to anything, and we will walk your IT or compliance team through the answers on a call.