FAQs

How do you keep my data safe?

We take data security extremely seriously. Impact is fully cloud-based and is hosted on a private AWS EU-West-2 network based in London, UK, ringfenced from the public internet with strict access controls.

The software itself has been built from the ground up with OWASP recommendations in mind and is regularly assessed for compliance by Sec-1. In addition:

• Information security practices aligned with the ISO 27001 standard (not certified)
• Cyber Essentials and Cyber Essentials Plus Certification (valid to 9 December 2026)
• Registered with the ICO
• WCAG 2.1: partially conformant with Level AA.
• Qualys A HTTPS enforcement terminating on load balances in private containers with Impact’s Core not accessible via public internet