Your data, protected and in the UK
Hosted in London, encrypted in transit and at rest, and separated from every other customer's by the database itself.
Encrypted from the gateway to your screen
Readings travel encrypted from the gateway on site to the cloud in London, and on to the dashboard. They are encrypted at rest too.
Where your data is
Hosted in London
Readings, accounts and the audit log are held in the UK, on Google Cloud in London.
Emails from the EU
Sign-in and security emails are sent from the EU.
Daily backups
Accounts and configuration are backed up every day.
Who can see what
Each customer kept apart
The database itself separates each customer's data, and we test that on every release.
You own your data
We export it when you ask, and delete it when you ask. We never sell it, share it with other customers, or use it to train anything.
Certifications and registrations
We are Cyber Essentials certified, through IASME. Our certificate runs to 19 October 2027. We don’t hold SOC 2 or ISO 27001. Our cloud providers do.
Registered with the ICO, ZC192894.
Third Eye Open Ltd is the registered data controller. We are a member of the North West Cyber Resilience Centre.
The pack covers our architecture, the services we use, retention, our known gaps and our answers to your security questionnaire.
Questions
Where is our data held?
In the UK, on Google Cloud in London. Sign-in and security emails are sent from the EU.
Can other customers see our data?
No. The database itself separates each customer’s data, and we test that on every release.
Can we fill in our own security questionnaire?
Yes. Request our security pack and send your questionnaire with it.
Can we have our data exported or deleted?
Yes, on request, in a standard format.