Security and data.
Assure holds some of the most sensitive records a care service keeps. Here is how we look after them.
How we protect your data
UK-hosted
Your data is held in UK data centres in London, and stays in the UK.
Encrypted
Encrypted in transit and at rest, including backups.
Multi-factor sign-in, for everyone
Multi-factor sign-in is compulsory for every account. A password alone never signs anyone in.
Daily backups
Backed up every day, held separately from the live service, with regular restore tests.
Role-based access
Staff see only what their role allows, and every key action is recorded in a full audit trail.
Safe alert emails
Alert emails never contain personal details. They ask the recipient to sign in.
Your data, your control
You are the data controller for the records your service keeps in Assure. Eviqa Ltd is your processor, under a data processing agreement that meets Article 28 of the UK GDPR. Eviqa Ltd is registered with the Information Commissioner's Office, registration number ZC262154.
If something goes wrong, we tell you about any personal data breach affecting your data without undue delay, and support you with any report you need to make.
When you leave, we return your data to you and then delete it.
A full security pack and data processing agreement are available on request from security@eviqa.health.
Reporting a security concern
If you think you have found a security issue in Assure, email security@eviqa.health. We will respond within 1 working day.
Security questions
Is our data stored in the UK?
Yes. Assure is hosted in UK data centres in London.
Can Eviqa staff see our records?
Only where needed to support you or keep the service running, and under the confidentiality terms of our data processing agreement.
Do you use our data to train AI or for marketing?
No. We only use your data to provide Assure to you.
Is multi-factor sign-in compulsory?
Yes, for every account in every organisation.
Will you complete our supplier security questionnaire?
Yes. Email security@eviqa.health and ask for our security pack.
Need the full security pack?
A full security pack and data processing agreement are available on request from security@eviqa.health.
Simple pricing, every feature included. See pricing