Security
- OUR COMMITMENT
At Insights for Improvement, we take the security of your data seriously. We implement comprehensive security measures to protect the information entrusted to us.
---
- INFRASTRUCTURE SECURITY
2.1 Hosting
- Our services are hosted on Microsoft Azure
- Data centres located in the UK and EU
- SOC 2 Type II and ISO 27001 certified infrastructure
2.2 Network Security
- Enterprise-grade firewalls
- DDoS protection
- Regular vulnerability scanning
- Intrusion detection systems
---
- DATA PROTECTION
3.1 Encryption
- Data encrypted in transit using TLS 1.2+
- Data encrypted at rest using AES-256
- Secure key management practices
3.2 Access Controls
- Role-based access control (RBAC)
- Multi-factor authentication for administrative access
- Principle of least privilege
- Regular access reviews
---
- APPLICATION SECURITY
4.1 Development Practices
- Secure coding standards
- Code review processes
- Dependency vulnerability scanning
- Regular security testing
4.2 Authentication
- Strong password requirements
- Session management
- Account lockout policies
---
- OPERATIONAL SECURITY
5.1 Monitoring
- 24/7 system monitoring
- Security event logging
- Anomaly detection
5.2 Incident Response
- Documented incident response procedures
- Regular testing of response plans
- Post-incident reviews and improvements
---
- COMPLIANCE
We maintain compliance with:
- UK General Data Protection Regulation (UK GDPR)
- Data Protection Act 2018
- Privacy and Electronic Communications Regulations (PECR)
---
- EMPLOYEE SECURITY
- Background checks for employees
- Security awareness training
- Confidentiality agreements
- Access revocation upon departure
---
- BUSINESS CONTINUITY
- Regular data backups
- Disaster recovery procedures
- Business continuity planning
- Geographic redundancy
---
- REPORTING SECURITY ISSUES
If you discover a security vulnerability, please report it responsibly to:
Email: [Add security contact email]
We appreciate responsible disclosure and will:
- Acknowledge receipt within 48 hours
- Investigate promptly
- Keep you informed of progress
- Not take legal action against good-faith reporters
---
- CONTACT
For security-related enquiries:
Insights for Improvement
Email: info@insights4improvement.co.uk