01
UK data residency
Customer databases and uploaded files are held in United Kingdom infrastructure.
Security
Trust controls for serious estate data.
UK hosting, encryption, tenant isolation and audit trails for regulated estate teams.
UK
primary data residency
AES-256
data encrypted at rest
Audit
user actions logged for review
Controls that show up in the work.
Security is treated as operational evidence: where data lives, who can see it, and what changed.
02
Encryption by default
TLS 1.2+ in transit and AES-256 at rest protect estate data, files and user records.
03
Role-based access
Least-privilege roles restrict each user to the estate workflows their job requires.
04
Audit trail
Uploads, edits, exports and administrative actions are logged for governance review.
05
Tenant isolation
Every organisation is logically separated at the data-access layer.
06
Private access controls
Admin and preview entry points are gated while the platform is in fundraising preview.
Data residency is a procurement fact.
EstatesAI is built for NHS, public-sector and FM customers who need a clear jurisdiction story before a pilot starts.
Primary region
United Kingdom
Data at rest
AES-256 encrypted
Data in transit
TLS 1.2 minimum
Backups
Daily with recovery controls
Personal data and AI
Not sent for enrichment
Compliance and processor transparency.
Security claims are kept close to the frameworks, providers and documents a buyer will ask for.
UK GDPR and DPA 2018
Compliant
Privacy by design, data minimisation and documented processing basis.
ICO registration
Registered
Registered with the Information Commissioner for data protection accountability.
NHS DSPT controls
Aligned
Security controls mapped to healthcare procurement expectations.
Cyber Essentials
In progress
Certification work is tracked as a public-sector readiness item.
Microsoft Azure
Cloud hosting and data storage
United Kingdom
Anthropic
AI enrichment for non-personal asset data
United States
Postmark
Transactional email delivery
US / EU
Need security review access?
Join the waitlist and we will share preview access with the right security context.