Certification in progress
ISO 9001 — Quality
Standardised delivery processes: requirements capture, change control, complaint handling and an annual internal audit.
The Company
Certifications & policies.
We do not ask clients to adopt practices we have not adopted ourselves. Below is where we stand on certification and which policies govern every engagement.
Standards
Where we stand.
Certification in progress
ISO 27001 — Information security
An information security management system with a risk register, Annex A controls, staff training and an incident response plan.
In force
GDPR
Records of processing activities, DPAs with clients and subprocessors, data minimisation and a data subject request procedure.
Design standard
WCAG 2.1 AA
Public-facing applications we deliver are tested for accessibility: keyboard navigation, contrast and semantic markup.
Policies
What we apply on every project.
- Information security policy
- Roles, data classification, acceptable use and mobile device rules.
- Access policy
- Least privilege, MFA on all administrative systems, quarterly permission reviews.
- Backup & recovery policy
- Immutable backups, scheduled restore tests, documented RPO and RTO.
- Incident management
- Escalation paths, client notification and blameless post-mortems.
- Change management
- Peer review, staging and a rollback path for every deployment.
- Supplier management
- Third-party review, data location checks and contractual commitments.
Public policies covering visitor data live in our Privacy Policy and Cookie Policy.
FAQ