Security that fits regulated operations.
We build for environments where traceability and control matter. We start with your constraints, then choose the right deployment approach.
How we think about security
Security is a set of decisions about data, access, and traceability. Here are the principles we build around.
Traceability
Outputs should be explainable. Responsibilities link back to source text so reviewers can validate them.
Least privilege
Access is role-based. Sensitive documents and outputs are scoped to the right users.
Controlled change
Changes are reviewable. If an output drives decisions, there is a clear approval path.
Deployment and data handling
Different clients have different constraints. We support options that keep data isolated and auditable.
- Cloud-hosted or private deployment
- You define what data is ingested, stored, and retained
- Integration with your identity and audit expectations
Work with your security team
- We will complete your security questionnaire
- We can provide a security brief under NDA
- We align to ISO 27001, SOC 2, and NIST CSF control families when required
If you need a specific deployment model, tell us. We will not sell you the wrong one.
Data protection and GDPR
We are registered with the Information Commissioner's Office as a data controller for our own corporate data, and act as a data processor when handling client information as part of service delivery.
How we handle your data
- Each client runs in a separate environment with dedicated databases and search indexes
- Hosted on Clairvynt's UK Azure infrastructure, or deployable on your own ring-fenced infrastructure for products that support it
- Client authentication uses your own Microsoft Entra ID
- Data encrypted at rest and in transit
Compliance and certification
- Registered with the ICO (UK data protection regulator)
- UK GDPR compliant as a data processor
- EU clients: the UK adequacy decision means no additional transfer mechanisms are required for UK-EU data flows
- Currently pursuing Cyber Essentials certification
Let's talk
We help energy and renewables teams turn document-heavy work into structured, traceable output. Share your use case and we'll outline if and how we can help.