What your procurement team will ask for

Company facts, insurance limits, the security management system, and a straight answer on certifications including the ones we do not hold. Certificates on request.

Who you are contracting with

Everything on this page is either publicly verifiable or available as a certificate on request. Nothing here is aspirational.

Cover in force

All placed with Hiscox Insurance Company Limited. Certificates provided at contract signature and on renewal.

£5m
Professional indemnity, per claim
£5m
Employer's liability
£2m
Public liability, each claim
2016
Retroactive cover from

Professional indemnity carries a retroactive date of April 2016, so work delivered since then is covered. Most client contracts ask for between £1m and £5m of professional indemnity and public liability, which these limits meet.

The management system behind the work

An operating ISMS aligned to ISO/IEC 27001:2022, with certification in progress. We will say plainly where we are rather than imply a certificate we do not yet hold.

Policies in force

Information security, access control, encryption, password and authentication, network security, physical security, mobile device, remote working, clear desk and screen, data classification, data retention and disposal, backup and recovery, change management, third party risk management, incident and business continuity.

Controls in operation

Multi factor authentication enforced across the estate. Endpoint detection and response deployed. Annual penetration testing, most recently November 2025, with reports available in sanitised form. Documented access control and joiners, movers and leavers processes, with access changes logged.

People

UK right to work verified on every engineer. Pre employment screening on every hire. Confidentiality agreements signed by all staff. Security and data protection training tracked centrally. Client side security checks and clearances completed where an engagement requires them.

UK delivery

Rel8 CX Limited is registered in England and Wales and contracts with you directly. Engineers work the UK business day rather than handing over across regions. Data stays in the UK or EEA, with UK GDPR as the operating default, and we complete your data processing agreement rather than insist on ours.

Held, in progress, and not held

Suppliers usually publish only the first column. All three are more useful to you.

Held today

ICO registration ZC028999. Professional indemnity, employer's liability and public liability cover, all active. AWS Advanced Partner and Amazon Connect Delivery Partner status. UK skilled worker sponsor licence.

In progress

ISO/IEC 27001:2022 certification. The management system is documented and operating across the policy set above. The external certification audit is scheduled for later this year, and until the certificate is issued we do not claim it. Ask us for the current stage and the expected date and you will get a straight answer rather than a marketing one.

Not held

SOC 2, Cyber Essentials Plus. If your procurement requires either as a hard gate, tell us early and we will be straight with you about timing rather than waste your evaluation cycle.

How this shows up in the agents we build

Taking this to your security team?

Talk it through with an engineer. We will also send certificates, the sanitised pen test report and our security answers on request.

Talk to an engineer

30 minutes, free, no obligation. Or email hello@rel8.cx