Built to survive procurement.
If your security team is going to ask, the answer is probably already on this page. If it isn't, it's one email away — [email protected].
Plaintext never leaves your device.
Mark a note private and it's encrypted in your browser before it touches the network. Your organisation's master key rotates on a schedule you set. We hold ciphertext.
PBKDF2-SHA256, 600 000 iterations, 32-byte output.AES-256-GCM with random 96-bit IV. Authenticated encryption — tampering is detectable.TLS 1.3 to UK data centres. Ciphertext over the wire. HSTS preload. HTTP/3.Choose where your data sleeps.
Default tenancy is the United Kingdom. Team and Enterprise customers can elect for dedicated tenancy in the EU or US. You pick. We honour it.
What's certified, what's coming.
We don't bluff badges. Here's our current posture and the roadmap. The big ones land in the next twelve months.
Everything your security team will ask for.
All the artefacts up front. No NDA required to read most of them. If you need something we haven't published, ask.
Still have questions?
Talk to a human. We answer security and procurement questions ourselves — no sales gating, no chatbot.
Email [email protected]