Our information security policies provide a robust framework under which we manage and process your company’s data. Our security infrastructure encompasses world-class hardware and software in which we continually invest, in order to defend against the latest known threats.

​

• We are Cyber Essentials Plus Certified

• We use secure data centres managed by Amazon Web Services, which hold a broad set of industry standard accreditations such as ISO27001 and ISO9001.

• Our data centres are connected to the internet with redundant internet links and bandwidth can be easily upgraded on requirement.

• There is redundancy at every component and service level, as well as spare capacity, so we can scale our servers on demand. This means VettingGateway can continue to run for prolonged periods even after experiencing major component failures, and we don’t run out of space.

• All new VettingGateway employees are background-checked to DfT/CAA standards, which includes a basic DBS.

• Our infrastructure is protected by firewalls and all management access requires two-factor authentication.

• Virus scan technology is implemented throughout our infrastructure.

• Annual independent security assessments are performed.

• An ongoing vulnerability scanning, and management program is in place.

• Machines are built from approved hardened images and verified in third party security assessments.

• A continuous patching cycle is in place to ensure the latest security updates have been applied

• We have restore points for critical data taken every 5 minutes. Backup data is securely kept at same geographic regions, yet sufficiently distant to ensure data is not lost in the event of a disaster, whilst complying with local data protection regulation.

• We engage skilled information security and data privacy specialists to ensure security is always a priority.

• Role based permissions are used to control staff access to systems and data.