We use a multi-layered approach to protect that key information; constantly monitoring and improving our application, systems and processes to meet the growing demands and challenges of security.

Certifications and Memberships

ISO 27001

ISO 27001 is the international standard that provides the specification for a best-practice information security management system (ISMS).

Achieving accredited certification to ISO 27001 provides an independent, expert assessment that our information security policies and procedures are managed in line with international best practice. This involves over 140 security controls and regular external audits to verify our security controls implementation.

Certification Expiry: 5th February 2025
Certificate no: 223238

Cyber Essentials

A UK Government backed, industry-supported scheme to help organisations protect themselves against common online threats. This requires ZetaSafe to have specific policies and procedures in place and requires our network to be externally scanned for vulnerabilities.

CiSP (UK Government’s Cyber Security Information Sharing Partnership) Members

A joint industry and UK Government initiative set up to exchange cyber threat information in real time, in a secure, confidential and dynamic environment, increasing situational awareness and reducing the impact on UK business.

Secure Data Centres

Our services are located at top-tier Microsoft Azure data centres. These facilities provide carrier-level support, to SSAE18 level of compliance which include:

• Security & Resilience
• Access Control and Physical Security
• Environmental Controls
• Fire Detection and Suppression
• Power Redundancies
• Network Protection

Threat Protection and Data Security

Beyond the physical layer, our service is protected virtually with firewalls to block unused protocols and to detect and resist threats. This includes but not limited to features such as:

• IP Reputation Management
• DoS/DDoS Mitigation
• Web Application Firewall
• Network Intrusion Detection
• Hardened Operating Systems
• Operating System Patching
• Anti-Malware

Secure Transmission and Sessions

• Connection to ZetaSafe is done via TLS 1.3, HTTP Strict Transport Security (HSTS) and with security headers ensuring that our users always have a secure and encrypted connection.
• The user must login using their individual username and password which provides a secure token to ensure the session is limited to their paired dataset.
• Our clients’ data is stored in a sophisticated database, ensuring there is no possibility for accidental data leakage.

Back Up and Disaster Recovery

• Our database boasts near-real time database replication to ensure database integrity is maintained.
• Servers are protected with managed backups with 14-day retention.
• Our disaster recovery tests verify our projected recovery times and the integrity of the customer data.
• Beyond our real time replication, we capture full independent database backups every 3 hours and securely transmit this to an off-site protected location for a set archiving period.
• Off-site backups are encrypted at rest.
• Off-site backups are securely destroyed when retired.

Internal and Third-Party Testing and Assessments

ZetaSafe regularly tests for security vulnerabilities and regularly scans our network and systems for vulnerabilities. Third-party assessments are also conducted regularly which include:

• Application vulnerability threat assessments.
• Network vulnerability threat assessments.
• Selected penetration testing and code review.
• Security control framework review and testing.

Security Monitoring

Our Information Security department monitors notifications from various sources and alerts from internal systems to identify and manage threats.

Data Protection inc GDPR

ZetaSafe is Committed to the UK’s Data Protection Act 2018 (DPA’18) including the EU General Data Protection Regulation (GDPR).

In May 2018, the UK’s and EU data protection legislation was update for the first time in 20 years. GDPR replaces the 1995 EU Data Protection Directive. GDPR strengthens the rights that individuals have regarding personal data relating to them and seeks to harmonize data protection laws across the EU, regardless of where that data is processed. ZetaSafe helps our customers to comply with the GDPR by providing with ZetaSafe’s stringent privacy and security protections.

Data Protection Registration

ZetaSafe Limited is registered with the UK’s Information Commissioner’s Office (ICO). This means we are contractually committed to delivering our services in compliance with UK’s DPA’18.

ICO Registration Number: Z9253709

Please review our Privacy Policy for the latest details.

NB: Whilst this document describes specific tools, technologies and vendors, ZetaSafe is constantly evaluating these and as a result some will change over time. ZetaSafe does not commit to using a specific tool or vendor.

Customers who were trained by ZetaSafe have higher user adoption rates and improved overall compliance statistics (Source: ZetaSurvey logon analysis). Train individual users in classrooms, via instructor-led virtual classes, or online courses. We’ll even come to you to train your entire team in private classes.

Handheld Training

In order to ensure that your engineers/field staff are using ZetaMobile and their handheld devices (PDAs) accurately and with confidence, ZetaSafe offer Handheld Training which can be delivered onsite for your convenience. ZetaSafe’s Handheld Training includes tutorials such as: using the PDA, using ZetaMobile, working with assets, entering test results and synchronising the PDA.

End User Training

Through undertaking ZetaSafe’s specific training for end users, ZetaSafe users will become more confident, productive and efficient in their use of the ZetaSafe portal. They will increase their familiarity with features, functionality and navigation; ultimately increasing your ROI.

Administrator Training

ZetaSafe’s Administrator Training ensures that Administrators have the core knowledge required to use ZetaSafe effectively and efficiently; manage areas of the system and processing and interpreting information. Administrator training is suitable for those new to their role in using ZetaSafe or those who wish to improve or increase their knowledge of the system.

Implementer Training

Created specifically for those involved in designing and implementing a ZetaSafe solution for their company or clients. Implementers training will focus on the fundamentals of ZetaSafe configuration and management and topics relevant to solution design. Learn how to plan and implement solutions, design solutions, gather client requirements and plan a successful project.