Information Security

We will deliver regular training to ensure that staff can manage sensitive information securely and in compliance with recognised standards. An Information Security Policy will set out clear responsibilities and controls, with staff required to review and adhere to it.

A detailed record of data-handling activities will be maintained through our Data Processing Register. All essential data will be securely stored for at least five years, with annual security audits confirming that our processes remain robust and compliant.

To protect customer information, we will establish secure processes for handling and storing communications, both electronic and voice. Network and platform security will be regularly tested, and procedures updated to meet industry best practice.
Training in AML, CTF and information security will take place annually, with additional targeted training if procedures or regulations change. Our approach ensures that security controls evolve alongside regulatory requirements.