Security at Surgeie

Our Security Commitment

Security is foundational to Surgeie. As a UK-based platform serving agencies and enterprises, we implement comprehensive security measures that meet and exceed industry standards.

Infrastructure Security

• UK Data Centres: All data is stored in UK-based data centres with ISO 27001 certification.
• Network Security: DDoS protection, WAF, and intrusion detection systems protect our infrastructure.
• Redundancy: Multi-region failover and automated backups ensure business continuity.

Data Protection

• Encryption in Transit: All data transmitted using TLS 1.3 with modern cipher suites.
• Encryption at Rest: AES-256 encryption for all stored data including backups.
• Key Management: Secure key rotation and management using industry-standard practices.

Access Security

• Multi-Factor Authentication: MFA available for all accounts, required for admin access.
• Role-Based Access: Granular permissions control who can access what within your organisation.
• SSO Integration: Enterprise plans support SAML and OAuth SSO providers.

Compliance

• UK GDPR: Full compliance with UK data protection regulations.
• FCA Ready: Security controls suitable for financial services clients.
• NHS DSP Toolkit: Working towards NHS Data Security and Protection Toolkit compliance.

Security Monitoring

Our security team monitors all systems 24/7 with automated alerting for suspicious activity. We conduct regular penetration testing and security audits by independent third parties.

Vulnerability Disclosure

We maintain a responsible disclosure programme. If you discover a security vulnerability, please report it to security@surgeie.com

Contact

For security enquiries or to request our security documentation, contact our security team at security@surgeie.com