Trust centre
Safety-critical software, secured to match.
The Salvus Network runs on the UK’s most hazardous sites. Our security posture, data handling and certifications are built for that responsibility.
Cyber Essentials
Independently assessed against the UK government-backed Cyber Essentials scheme covering firewalls, secure configuration, access control, malware protection and patch management.
ISO 27001
Our information security management system is being audited against ISO 27001. Documentation and controls are in place; certification is expected shortly.
GDPR
We process personal data lawfully under UK GDPR, with data-minimisation by design, a lawful basis for every processing activity and honoured data-subject rights.
UK data residency
All customer data is stored and processed in the United Kingdom. We do not transfer personal data outside the UK without an appropriate safeguard in place.
Sub-processors
Who we work with.
We keep our sub-processor list short and documented. Each is bound by a data-processing agreement.
| Sub-processor | Purpose | Location |
|---|---|---|
| Convex | Real-time application database & backend | EU (eu-west-1) |
| Vercel | Web application hosting & edge delivery | UK / EU regions |
| SMTP email provider | Transactional email (access links, confirmations) | UK / EU |
| Plausible Analytics | Cookieless, privacy-first web analytics | EU (Germany) |
Data Processing Agreement
Our standard DPA covers processing scope, security measures, sub-processors and data-subject rights. Request a copy to review or counter-sign.
Security questions before you commit?
Talk to our team, we’ll walk you through our controls and share documentation.