DataPress logo
Trust & Compliance

Certification

Version:  1.2
Updated:  19th January 2025

We follow security best practices and leverage the robust compliance frameworks of our cloud infrastructure providers. Our approach aligns with the UK National Cyber Security Centre's Cloud Security Principles for cloud service providers.

Infrastructure Provider Certifications

Our application is built on top of ISO 27001 certified cloud infrastructure. We carefully select providers who maintain the highest security standards:

CertificationCloudflare logoDigitalOcean logoGoogle logo
ISO 27001 On Request On Request Public
SOC 2 Type II On Request On Request On Request
SOC 3 On Request Public On Request

Request Security Documentation

Some of our providers require NDAs or registration to access detailed compliance documentation. If you need specific compliance reports or certifications for security review purposes, please email [email protected] and we'll guide you through the process.

Security Responsibilities

Responsibility is shared between the cloud provider and the customer, in the Cloud Security Shared Responsibility Model.

Cloud provider responsibilities:

  • Physical data center security
  • Host infrastructure security
  • Network security and flow controls
  • Operating system security
  • Storage infrastructure security and encryption
  • Compliance certifications for infrastructure

Our responsibilities:

  • Application-level security
  • Identity and access management
  • User authentication
  • Application performance monitoring
  • Customer data privacy
  • Security incident response

Our security approach is aligned with the principles published by the National Cyber Security Centre (NCSC):

We leverage our providers' robust security controls while implementing additional application-level protections to ensure comprehensive security coverage.

For detailed information about our security practices, please review our Security Policy or contact our team.