iComply governs other organisations' compliance — so our own security, privacy and resilience are held to the highest standard. Here's how we protect your data.
Data is encrypted in transit (TLS 1.2+) and at rest using managed keys.
JWT authentication, MFA and SSO / SCIM for enterprise identity.
Line-level security and strict segregation by organisation and tenant.
Every relevant action is recorded in an immutable manner to ensure full auditability.
Daily backups with retention periods and tested recovery procedures.
Data hosted in the EU, with GDPR compliance by design.
Our journey towards formal certification — and, of course, iComply runs its own programme at iComply.
Information security management.
Trust services criteria.
Data protection in the EU.
AI management system.
A transparent list of the data processors involved in the delivery of iComply. The full DPA and the register of data processors are available on request.
| Subcontractor | Purpose | Region |
|---|---|---|
| Cloud hosting | Application & database hosting | EU |
| Storage of objects | Storage of evidence & files | EU |
| Email delivery | Transactional notifications | EU |
| AI provider | AI Co-pilot (opt-in, tenant-specific) | EU |
Please request our DPA, register of subcontractors and security overview — we’ll send them to you.
