For your procurement team
- Data processing agreement (DPA)
- Completed security questionnaires
- Information security summary
Trust Centre
How DigitalZeg protects your data, systems and AI.
Security and data protection are built into how we work. This page explains our practices, suppliers and certifications in one place.
Draft: confirm each commitment and fill in the bracketed details before launch.
In place
UK GDPR by design
Data minimisation, clear retention rules and a data map for every project.
In place
UK and EU hosting
Client data hosted in UK or EU regions by default.
In place
Encryption
Data encrypted in transit (TLS 1.2+) and at rest on all hosted systems.
In place
Access control
Multi-factor authentication and least-privilege access on all accounts.
In place
AI safeguards
Human review, evaluation suites and no training on client data.
In place
Incident response
Clients notified promptly of any incident affecting their data.
AI safeguards
Responsible AI, in practice.
Your data stays yours
We use AI providers' business terms, where client data is not used to train models.
Humans in the loop
AI that affects customers, money or personal data has a human review step.
Tested before launch
Every AI feature passes an evaluation suite and is re-tested after changes.
Attack-tested
AI tools are tested against prompt injection and data leakage.
Certifications & registrations
Where we stand today.
ICO registrationIn progress
Registration number: [ZA000000]
Cyber EssentialsPlanned
UK government-backed security certification.
Companies HouseTo confirm
Company no. [00000000]
Suppliers
Who processes data on our behalf.
| Supplier | Purpose | Location |
|---|---|---|
| [Hosting provider] | Website and application hosting | [UK / EU] |
| [Email provider] | Business email | [Region] |
| [Form service] | Contact form delivery | [Region] |
| [AI provider] | AI features in client projects, under business terms | [Region] |
Found a security issue?
Please report it privately to [email protected]. We'll acknowledge it within two working days and keep you updated until it's resolved.