Trust
Security overview
Control Plane holds sensitive operational data — incidents, risk assessments, audit findings and, in some cases, employee-related records. Security isn't an add-on to the product; it's part of how the platform is built.
Security topics
How we protect your data
An overview of the controls and practices underpinning the platform.
Tenant isolation
Each customer's data is logically separated, so one tenant can never see or affect another's.
Encryption
Data is encrypted in transit and at rest.
Authentication
Standard authentication today, with SSO and identity provider support for organisations that need it.
Authorisation
Role-based access control governs what each user can see and do within their organisation's tenant.
Audit logging
Key actions are logged, so changes to records, configuration and access can be traced.
Backups
Data is backed up regularly as part of the platform's operational practice.
Disaster recovery
Infrastructure and recovery practices are designed to bring the platform back online after an outage.
Monitoring
Infrastructure and application monitoring to detect and respond to issues.
Data residency
As the platform expands into new regions, we're building toward data residency options to match local requirements.
AWS architecture
Control Plane runs on AWS infrastructure, using the platform and security services AWS provides.
Access controls
Access to production systems and customer data is limited to what's needed to operate and support the platform.
Trust area
More on trust and compliance
Related topics worth knowing about as you evaluate the platform.
Infrastructure
Cloud infrastructure built for multi-tenant SaaS, not a single shared server.
Data protection
Controls over how customer data is stored, accessed and processed.
Compliance
We're building the platform's compliance posture as it matures — talk to us about your specific requirements.
Subprocessors
A list of the third parties we use to help operate the platform, available on request.
Business continuity
Practices in place to keep the platform available and your data protected.
Privacy
See our privacy policy for how we handle personal data.
Need our security documentation?
For a technical evaluation, security questionnaire or specific compliance question, get in touch.