Trust Centre
Trust Centre
How we look after your data, explained plainly.
At a glance
- Hosted in the UKAWS London region (eu-west-2)
- EncryptedIn transit and at rest
- WCAG 2.2 AAEvery page tested automatically
- CertificationsOn our roadmap, claimed only once held
Data residency
The public website is hosted on Amazon Web Services, with its origin in the London region (eu-west-2). Online enquiry forms are not enabled yet.
Security
- Encryption in transit (TLS 1.2 or later) and at rest (AWS KMS)
- Role-based access, scoped to your organisation
- Organisation data isolation, tested automatically on every release
- Single sign-on and multi-factor authentication
- An append-only audit trail
- Penetration testing before major releases
- Incident response that meets UK GDPR breach-reporting timescales
Certifications
We only claim a certification once we hold it. Today, each of these is on our roadmap.
| Standard | Scope | Status |
|---|---|---|
| Cyber Essentials Plus | PropSage Ltd, all systems | On our roadmap |
| ISO/IEC 27001 | Information security management system | On our roadmap |
| SOC 2 Type II | Platform services | On our roadmap |
Sub-processors
Last updated 11 November 2026. We add new sub-processors here before they process customer data.
| Sub-processor | Purpose | Location | Transfer |
|---|---|---|---|
| Amazon Web Services EMEA SARL | Public website hosting, storage and delivery | Origin in London; public content delivered globally by CloudFront | See the privacy notice |
Privacy
We process personal data under UK GDPR and the Data Protection Act 2018. Our ICO registration number is [ICO registration number]. To make a data subject request, email [dpo@propsage.co.uk]. Read our privacy notice.
AI principles
Our assistants answer from PropSage data with their sources cited, say when they do not know, and always tell you that you are talking to AI. People make decisions that affect people. Customer data is not used to train third-party models. How PropSage works.
Data provenance
Every value is sourced and dated. We use authorised data only, and we do not scrape websites.
Accessibility
We design to WCAG 2.2 level AA and test every page automatically. Read our accessibility statement.
Security pack and DPA
Request our security pack and data processing agreement. A mutual NDA may be required for the pack.
Request the security packReport a vulnerability
Email security@propsage.co.uk. Our security.txt follows RFC 9116.