Trust centre

Security overview

Cyber Health Score is designed around multi-tenancy, organisation isolation, role-based access, audited support access, fail-closed commercial and assessment controls, and durable processing separated from ephemeral coordination.

Data processing

Customer organisations remain responsible for their own lawful basis and internal policies for employee or supplier personal data they submit. Platform processing for hosted customers is described in contractual documentation when a commercial agreement is in place.

Subprocessor transparency

Hosted deployments commonly rely on infrastructure and delivery providers for application hosting, database, email delivery, payments and durable job delivery. Exact subprocessors for a commercial engagement are confirmed in that engagement's documentation and may change with notice under contract.

Retention

Retention follows plan entitlements and contractual configuration where supported. Export-before-delete and approval-gated deletion pathways exist for responsible lifecycle management. Destructive deletion remains disabled by default.

Business continuity overview

Operational foundations include durable job recovery, provider resilience visibility, platform health indicators and backup awareness. These are operational readiness controls, not a certified uptime guarantee.

Enterprise support expectations

Authenticated tenants use in-app Help and support tickets. Enterprise support expectations, response targets and escalation paths are defined in the commercial agreement when contracted. Public status covers application availability, not tenant-specific incidents.