FAQs

How do you keep my data safe?

We take data security extremely seriously. Impact is fully cloud-based and is hosted on a private AWS EU-West-2 network based in London, UK, ringfenced from the public internet with strict access controls.

The software itself has been built from the ground up with OWASP recommendations in mind and is regularly assessed for compliance by Sec-1. In addition:

  • ISO 27001 Compliant & HIPAA Eligible Infrastructure
  • Cyber Essentials Plus Certification (OWASP)
  • ICO Certified – DPA Officer
  • WCG 2.1 Certified Level A & AA.
  • Qualys A HTTPS enforcement terminating on load balances in private containers with Impact’s Core not accessible via public internet