Security
Your clients' data, treated as if it were ours.
Outworx is built for regulated workflows. Here's how we keep your firm and your clients safe.
Breach notification
If a breach affects your data, we tell you within 48 hours so you can meet your own ICO deadline.
Encryption everywhere
TLS 1.3 in transit, AES-256 at rest. Customer data is encrypted with per-tenant keys.
UK hosting
All production data stored in AWS eu-west-2 (London). Any sub-processor outside the UK is covered by UK transfer safeguards.
UK & EU GDPR
Registered with the ICO (ZC186598). Data Processing Agreement published at /dpa, with the full sub-processor list.
SSO & MFA
SAML SSO available on Business plans. TOTP and WebAuthn supported for all users.
Least-privilege access
Production access is role-based, logged, and reviewed quarterly. No customer data on engineer laptops.
Request our security pack
Security questionnaire answers and a signed copy of our Data Processing Agreement are available on request.
security@outworx.ai →