Trust & security centre
Security your compliance team will sign off.
Everything your procurement, legal and security reviewers usually ask for, in one place.
Encryption everywhere
TLS 1.3 in transit and AES-256 at rest on every database, backup and file store we provision.
Least-privilege access
SSO with hardware-key MFA for staff. Client production access is time-boxed and logged.
Your region, your data
We host in London, Frankfurt, Bahrain/UAE, Virginia or Sydney — wherever your regulator expects.
Pen-tested before launch
OWASP Top 10 review on every build, plus an external penetration test on Enterprise engagements.
Audit trail
Every deploy, permission change and data export is recorded and available to you on request.
Paperwork first
Mutual NDA before discovery. DPA, SCCs and IDTA available for international transfers.
Frameworks
- UK GDPR & DPA 2018Compliant
- EU GDPRCompliant
- UAE PDPLCompliant
- Cyber Essentials (UK)Certified
- WCAG 2.2 AABuilt-in
- ISO 27001In progress — target Q2 2027
- SOC 2 Type IPlanned — 2027
Documents
- Mutual NDA terms →
- Privacy policy →
- Sub-processors list →
- Service level agreement →
- Responsible disclosure →
- Accessibility statement →
Need a security questionnaire (CAIQ, SIG Lite or your own)? Email info@devremind.com — we return them within 3 working days.
Start with an NDA
We sign your NDA or ours before a single detail of your project is shared.