Sector - Public Sector
Systems where security isn't optional
Police federation portals. Public sector systems. AES-256 encryption. AI-monitored UK infrastructure. Procurement process: we've been through it.
Police federation portals. Public sector systems. AES-256 encryption. AI-monitored UK infrastructure. Procurement process: we've been through it.
Secure Platforms
ISO 27001 certified data centres, AES-256 encryption, site data and backups stored in the UK
Procurement-Ready
We've filled in security questionnaires. Our DPO answers are documented.
We've built systems for West Yorkshire Police Federation and worked alongside NHS organisations including Harrogate & District NHS Foundation Trust and Leeds Teaching Hospitals. In those contexts, data protection isn't a box-ticking exercise - it's a genuine requirement with real consequences if it isn't met.
Sites run at Tier 3 data centres in London and Manchester, including Digital Realty, certified to ISO 27001 and PCI DSS and used by major banks and the London Internet Exchange. Site data and backups are held in the UK. Cloudflare sits in front for security and performance - its network is global, so traffic in transit is handled at whichever edge location is nearest the visitor.
Systems handling sensitive personal data use AES-256 encryption at rest. We build in role-based access control, full audit trails and session management, scoped to the data the system actually holds.
If your procurement team has a security questionnaire, we've filled one in before. If your data protection officer has questions, we have documented answers. We understand that working with public sector organisations involves process as well as technology, and we're set up for both.
The West Yorkshire Police Federation portal we built handles sensitive personal data for federation members across the region. It includes a secure document management system, member communication tools and role-based access for federation officials, branch representatives and support staff.
We've also worked alongside NHS organisations on digital projects - environments where data classification, access control and compliance need to be properly considered at every stage, not retrofitted after the fact.
If you're working through a procurement process that requires supplier security questionnaires, proof of infrastructure compliance or statements on data handling practice, we can provide all of it. We've been through the process before.
AES-256 encryption on all systems handling sensitive personal data. Encrypted at rest and in transit. Key management handled securely.
Role-based access control with granular permissions. Session management, MFA where required, full audit trails on all sensitive data access.
Tier 3 data centres in London and Manchester, including Digital Realty - trusted by major banks and the London Internet Exchange. ISO 27001, PCI-DSS, SOC 2. Hosted on UK infrastructure, with your data and backups held in UK data centres.
Data processing agreements, retention policies, subject access request tooling and documented data flows. We work with your DPO, not around them.
Full logging on all access to sensitive records. Who accessed what, when, from where. Exportable for internal review or regulatory requirements.
Public sector and membership organisation contracts involve more than a proposal and a price. There are supplier questionnaires, security assurance requirements, data protection impact assessments, and procurement policies that need to be satisfied before work can begin.
We've been through this process with police federation and NHS-adjacent organisations. We can provide documented answers for your DPO, infrastructure certifications from our hosting providers, and responses to NCSC Cyber Essentials-aligned questions. If you need to know something specific before you can progress a project, ask - we'll either have it or tell you honestly if we don't.
We've answered public sector security questionnaires before. We know what's typically asked and we have documented responses ready.
ISO 27001, PCI-DSS and SOC 2 compliance documentation from our hosting partners available on request.
Data Processing Agreements, documented data flows and retention policies ready for your DPO to review before anything starts.
Whether it's a member portal, a secure data system or a public-facing website with procurement requirements attached - speak to us before the tender closes.