Trust Centre

Security and compliance at Netru

We hold ourselves to the same standards we help our clients achieve. Here is an overview of our security posture, certifications, and data handling practices.

Data security

All data encrypted at rest and in transit
AES-256 encryption for stored data
TLS 1.3 for all data in transit
Regular penetration testing
Vulnerability management programme

Access controls

Multi-factor authentication enforced
Role-based access control
Principle of least privilege
Regular access reviews
Single sign-on (SSO) supported

Operational security

24/7 security monitoring
Incident response plan in place
Business continuity planning
Regular security training for all staff
Background checks for all employees

Data handling

GDPR compliant data processing
Data Processing Agreements available
Data residency in the UK and EU
Data retention policies in place
Right to erasure supported

Sub-processors

Netru uses a limited number of trusted sub-processors to deliver our services. All sub-processors are subject to data processing agreements and are assessed for security compliance.

AWS (Cloud infrastructure)

Vanta (GRC platform)

Drata (GRC platform)

HubSpot (CRM)

Google Workspace (Productivity)

Request our security documentation

Need our Data Processing Agreement, security questionnaire responses, or penetration test reports? Get in touch and we will provide what you need.

Request documentation