Trust centre

Security worthy of the data you hold.

SCORE gives everyone their own secure access, keeps client records encrypted and hosted in the UK, and helps you stay compliant without the extra admin.

UK HOSTEDUK & EU GDPRENCRYPTED IN TRANSIT & AT RESTFULL AUDIT TRAILNEVER SOLD OR TRAINED ON

Hosted in the UK

Your data is hosted in the UK (AWS London, eu-west-2) and processed under UK and EU GDPR.

Encrypted in transit and at rest

Encrypted in transit (TLS 1.2+) and at rest (AES-256), so records are protected on the wire and on disk.

You stay in control

A full audit trail of every action, role-based access, and strict isolation so firms never see each other's data.

Yours to keep

All your data is exportable on request. No lock-in, because we would rather earn your stay than trap you.

Data protection

The specifics, in plain terms.

No jargon and no vague promises. These are the controls in place today. Where something is on our roadmap rather than live, we say so.

UK data hosting

Hosted on AWS in London (eu-west-2). Your records are stored in the UK.

UK & EU GDPR

Processed in line with UK and EU data protection law. Our data processing agreement is available to read.

Encryption

TLS 1.2+ in transit, AES-256 at rest.

Full audit trail

Every action is logged, so you can see who did what and when.

Access & accounts

Role-based access, and breached-password checking on sign-in.

Tenant isolation

Each firm's data is kept separate, so no firm can see another's.

Breach notification

If a personal data breach affects your records, we notify you without undue delay, in line with our obligations under UK GDPR.

Retention and deletion

Your data is yours and exportable on request. When you leave, we return or delete it in line with UK GDPR.

Choose your security level

Set your firm to Standard or Enhanced. Standard offers two-factor authentication and role-based access. Enhanced requires two-factor authentication for everyone and adds automatic log-out after a period of inactivity.

Soon Single sign-on (SSO)

AI & your data

AI that assists you, on data that stays yours.

Our AI-assisted checks help you work faster, but you remain the accountable professional. We do not use your data to train models, and nothing is shared outside your account unless you opt in.

Human in the loop

AI flags what to look at. You review, confirm and sign off. Nothing leaves without you.

Not training data

Your jobs, reports and clients are never used to train models, ours or anyone else's.

Focused, not generic

Built for surveying and valuation, and for the AI guidance you work under.

Where your data lives

The providers behind SCORE.

We keep the list of who processes your data short and transparent. These are the providers in use today.

UK (London / eu-west-2)

Amazon Web Services (AWS)

Cloud infrastructure, storage, and compute

UK (London) primary, EU (Ireland) failover

AWS Bedrock

AI/ML Processing — managed model hosting (reasoning, summarisation, field extraction)

EU (Ireland)

Heroku (Salesforce)

Application hosting and platform services

EU (Germany)

Mailgun (Sinch Email)

Email delivery (transactional emails, report delivery)

EU (France)

Mistral AI

AI/ML services (e.g. report assistance, extraction)

US / EU (EU-scoped CDN for UK/EEA traffic)

Cloudflare, Inc. (Turnstile)

CAPTCHA / Bot Protection (Turnstile) — bot protection and CAPTCHA on sign-up, login, and public forms

Sentry

Error monitoring and performance monitoring

EU (Frankfurt — PostHog EU Cloud)

PostHog, Inc.

Product & web analytics, session replay, heatmaps, interaction tracking, in-app surveys, feature flags, A/B testing, error tracking (two-tier: anonymous baseline under legitimate interest + consent-linked). Anonymous baseline carries no identifier and no IP; client IPs stripped and anonymize_ips set (no IP stored)

Legal & documents