What your procurement team will ask for

Company facts, insurance limits, the security management system, and a straight answer on certifications including the ones we do not hold. Certificates on request.

Who you are contracting with

Everything on this page is either publicly verifiable or available as a certificate on request. Nothing here is aspirational.

Cover in force

All placed with Hiscox Insurance Company Limited. Certificates provided at contract signature and on renewal.

£5m
Professional indemnity, per claim
£5m
Employer's liability
£2m
Public liability, each claim
2016
Retroactive cover from

Professional indemnity carries a retroactive date of April 2016, so work delivered since then is covered. Most client contracts ask for between £1m and £5m of professional indemnity and public liability, which these limits meet.

The management system behind the work

An operating ISMS aligned to ISO/IEC 27001:2022, with certification in progress. We will say plainly where we are rather than imply a certificate we do not yet hold.

Policies in force

Information security, access control, encryption, password and authentication, network security, physical security, mobile device, remote working, clear desk and screen, data classification, data retention and disposal, backup and recovery, change management, third party risk management, incident and business continuity.

Controls in operation

Multi factor authentication enforced across the estate. Endpoint detection and response deployed. Annual penetration testing, most recently November 2025, with reports available in sanitised form. Documented access control and joiners, movers and leavers processes, with access changes logged.

People

Pre employment screening on every hire. Confidentiality agreements signed by all staff. Security and data protection training tracked centrally. Client side security checks and clearances completed where an engagement requires them.

Passed security review? Find out which of the other nine gates is blocking you. Find out what is blocking you →

Held, in progress, and not held

Suppliers usually publish only the first column. All three are more useful to you.

Held today

ICO registration ZC028999. Professional indemnity, employer's liability and public liability cover, all active. AWS Advanced Partner and Amazon Connect Delivery Partner status. UK skilled worker sponsor licence.

In progress

ISO/IEC 27001:2022 certification. The management system is documented and operating across the policy set above. The external certification audit is scheduled for later this year, and until the certificate is issued we do not claim it. Ask us for the current stage and the expected date and you will get a straight answer rather than a marketing one.

Not held

SOC 2, Cyber Essentials Plus. If your procurement requires either as a hard gate, tell us early and we will be straight with you about timing rather than waste your evaluation cycle.

How this shows up in the agents we build

Security review is one gate of ten

This page covers how we handle yours. The assessment covers the other nine, and tells you which one your deployment is failing.

Find out what is blocking you

15 questions. 3 minutes. Free. Your recommendations immediately.

Already know what you need? Book a discovery call or email hello@rel8.cx