Security & Compliance

Your data is protected.
Your trust is earned.

BuiltRight Technologies takes a robust, documented approach to data security, privacy, and compliance. This page explains how we protect your business data and the standards we hold ourselves to.

Platform Security at a Glance

Data Regulation
UK GDPR and Data Protection Act 2018
Data Storage Location
United Kingdom
Encryption in Transit
TLS
Encryption at Rest
AES-256
Payment Processing
Stripe (PCI-DSS compliant)
Accreditation
NAS Certification Gold Standard

How we protect your data

Data Encryption

Data in transit is encrypted using TLS. Data at rest is encrypted using AES-256, in line with encryption standards used across financial and government systems.

UK Data Centres

Customer data is stored on servers located within the United Kingdom. Personal data is not transferred outside the UK/EEA without appropriate safeguards in place.

Access Controls

Access to customer data is restricted on a need-to-know basis and subject to regular review as part of our internal governance processes.

Security Testing

The platform is reviewed on an ongoing basis as part of our development process, with security issues tracked and remediated on a prioritised basis.

Incident Response

We follow UK GDPR obligations in respect of personal data, including notification to the ICO within 72 hours where a notifiable breach occurs.

GDPR Compliance

Our data processing activities are designed to comply with the UK General Data Protection Regulation and the Data Protection Act 2018.

NAS Certification Gold Standard

NAS Certification Gold Standard

Independently assessed against a recognised accreditation framework

BuiltRight Technologies holds Gold Standard certification under the NAS Certification scheme, following an independent assessment of our compliance framework, governance, ethics standards, and operational performance.

Learn More About BuiltRight →

Security questions?

If you have a specific security concern or require information for procurement or compliance purposes, please contact us directly.