Reach the right control owner
Use the security route for vulnerability reports and assurance questions. Use the data protection route for privacy rights, processing, retention, transfer, and regulatory enquiries.
Vulnerability reports, security questionnaires, independent-test material, architecture assurance, and incident-related security contacts.
Privacy rights, personal-data handling, processing roles, retention, deletion, international transfers, and data-protection enquiries.
For an enterprise assurance request
Include your organisation, assessed service, environment, deadline, questionnaire or framework, required jurisdictions, confidentiality requirements, and procurement contact. We will confirm applicability and disclosure level before issuing material.
- •Build Security and Data Annex
- •Data-flow and hosting schedule
- •Current security questionnaire response
- •Incident response and continuity executive summaries
- •Independent testing executive summary and retest letter when available
- •Assurance evidence index and approved supporting records
Before security testing, read our Vulnerability Disclosure Policy. It defines permitted testing, prohibited activity, reporting content, and coordinated disclosure.