EstatesAI is designed for organisations that take data seriously — NHS trusts, local authorities, FM contractors holding sensitive client estate data. Your data stays in the UK, encrypted, isolated, and auditable.
From the data centre to your browser, every layer is hardened by design.
All customer data is hosted exclusively in the United Kingdom. Your estate data never leaves UK jurisdiction — full stop.
Data encrypted in transit (TLS 1.2+) and at rest (AES-256). Your asset registers, compliance records, and user data are protected at every layer.
Role-based access control with least-privilege principles. Eight distinct roles mean each user sees only what their job requires.
Every user action — login, upload, edit, export — is logged with timestamp and IP. Full traceability for internal governance and external audits.
Your organisation's data is strictly isolated. No data is shared between organisations. Logical separation enforced at every data access layer.
Automated daily backups with point-in-time recovery. Backup integrity tested quarterly. Recovery time objective under 4 hours.
EstatesAI is hosted entirely within the United Kingdom. We chose a UK data centre specifically to support NHS, public sector, and local authority customers who require data to remain in UK jurisdiction.
* AI enrichment sends only non-personal asset data (asset names, building types, technical parameters). Personal data is never transmitted outside the UK.
Built for the regulatory environment your organisation operates in.
Privacy by design, data minimisation, lawful basis documented for all processing activities.
Registered with the Information Commissioner's Office as required by UK law.
Controls aligned to the NHS Data Security and Protection Toolkit standards for healthcare customers.
Cyber Essentials certification in progress — required for public sector and NHS contracts.
We use a small number of carefully vetted sub-processors. All are subject to data processing agreements. We notify customers of any changes with 14 days' notice.
AI enrichment sends only non-personal asset data to our AI provider — asset names, building types, disciplines, and technical parameters. Personal data (names, email addresses, IP addresses) is never transmitted to AI systems.
Our DPA is available for review. Enterprise customers can request a countersigned copy.
Start a 3-month pilot. Full platform, fixed low price, no annual commitment. Upload your asset register today.