Trust needs a clear foundation. Find our security principles and a starting point for questions about protecting information and digital services.
Protection suited to the task
Confidential information, accurate data and available services underpin reliable collaboration. The measures a customer project needs depend on its data, risks and agreed scope. Our policy sets out the shared principles.
Traceable changes to our web platform
Changes to our web platform are versioned and checked automatically before publication. These checks cover software dependencies and container images. Releases are signed and deployed using a unique version.
Clarify project security requirements
Responsibilities, access, operational scope and evidence requirements belong in the discussion before a project starts. If you need particular certificates, assessment reports or contractual assurances, please specify them. Requirements and available evidence are clarified for the individual engagement.
Report a potential vulnerability
A useful report identifies the affected URL or function, observed behaviour and reproducible steps. Keep evidence to the minimum necessary and avoid accessing other people’s data or disrupting services. Use the address below for your initial report.
Discuss a security concern
Describe the affected service, what you observed and when. Please do not initially send credentials, personal data sets or confidential evidence. We will agree a suitable channel with you for sensitive details.
[email protected]