Security & Compliance

Certifications & Documentation:

ISO 27001 Certificate (PDF)

Cyber Essentials Certification

ICO Registration: ZA643140

DBS Registered Body: 30067900008

Disclosure Scotland Organisation Code: EBC1694054

EBC Security Policy

OWASP Web Application Approach

EBC Privacy Policy

Encryption:

  • SSL for transmission; data at rest encrypted per Cyber Essentials.
  • Password policy includes expiry, lockout, complexity, and 2FA (optional). Authentication:
    • SAML & OAuth2 single sign-on
    • Role-based access; sessions timeout after 30 min inactivity

Audit & Monitoring:

  • Log files available; 6-monthly code scans; third-party audits per ISAE 3402 (SOC1)

Security Incident Management:

  • Log files available; 6-monthly code scans; third-party audits per ISAE 3402 (SOC1)

Cloud Hosting Infrastructure

  • Hosted by: Redstation (UK Data Centers); EBC-managed
  • Data Separation: Segregated persistence layer with Spring Framework

Backup & Recovery:

  • Dual live copies for immediate failover
  • Amazon EC2 disaster recovery protocol
  • Compressed JSON DB dumps

Firewalls & AV:

  • Firewall, Fail2Ban, IDS, antivirus policy across all servers

Vulnerability Management:

  • Regular penetration tests by Redstation
  • Full compliance with PCI DSS, ISO standards, Cyber Essentials

Support, Implementation & SLA

Availability:

  • 99.5% uptime target; typically 100% during core hours
  • 24/7 online system (FRESH), 9–5:30 phone support

Dedicated Contacts:

  • Account Manager and Customer Success colleague

Software Updates:

  • Monthly, overnight deployments with user documentation

Training:

  • Onsite setup included; additional training at £850/day

Documentation & Help:

  • Online user guides, videos, and FAQs (community launch planned)

Customisation:

  • Fully configurable (client/EBC), development at day rates:
    • Development: £1000/day, Training: £850/day,
      Configuration: £850/day

Support, Implementation & SLA

Availability:

  • 99.5% uptime target; typically 100% during core hours
  • 24/7 online system (FRESH), 9–5:30 phone support

Software Updates:

  • Monthly, overnight deployments with user documentation

Training:

  • Onsite setup included; additional training at £850/day

Documentation & Help:

  • Online user guides, videos, and FAQs (community launch planned)

Customisation:

  • Fully configurable (client/EBC), development at day rates:
    • Development: £1000/day, Training: £850/day,
      Configuration: £850/day

Sustainability & Governance

Sustainable Development Policy v1.0 (PDF)

Sustainability Policy (PDF)

Supplier Code of Conduct (PDF)

Policy Documents

Terms & Conditions

App Use Policy 2021 v1

App Privacy Policy 2021 v1

Business Continuity Plan (BCP)

Data Protection Contract Extract

Change Control Procedure

Frequently Asked Questions (FAQ)

A: Yes. We hold ISO 27001, Cyber Essentials, GDPR compliance, and multiple other certifications. Data is encrypted at rest and in transit

A: Online ticketing 24/7, phone support 9–5:30. SLA begins upon ticket logging.

A: All client data is hosted in UK-based Redstation data centers and is backed up regularly.

A: No, access is not enabled for any third parties. Only authorised internal personnel can access client data, and only on a need-to-know basis.

A: Role-based access, SSO (OAuth2/SAML), password policies, and optional 2FA.

A: All data is backed up and archived indefinitely to ensure availability and compliance with data management policies

A: Full disaster recovery plans are in place. Failover systems and Amazon EC2 fallback ensure business continuity.

A: Yes — all personal data is stored and processed in full compliance with the General Data Protection Regulation (GDPR) 2016/679.

A: Codebase is reviewed every 6 months, with monthly product updates and continuous improvements.

A: Only EBC internal support teams, on a need-to-access basis, never third parties.

A: Yes, client audits are accepted with relevant notice at a one off fee of £850. External audits occur annually.