Now Building Safety Act–aware — HRB questions appear automatically for high-rise residential buildings. See how ›

Security

Last updated: July 2026

Starter document. This describes our intended security posture. Please confirm each statement against your actual production setup before publishing externally.

We know fire risk assessments contain sensitive information about buildings and the people who use them. Protecting that data is a first-order concern in how we build and run Assura Safety.

Encryption

Data is encrypted in transit using TLS, and encrypted at rest in our hosting provider’s infrastructure.

Access control

Assessment data is scoped to your organisation. Access is governed by owner, admin and member roles, so each person sees only what their role allows. Assessments are not shared across organisations.

Hosting & data location

Our services run on reputable cloud infrastructure, with data stored in the UK and/or EU. We use trusted sub-processors for hosting and email delivery under appropriate data-processing agreements.

Reliability

We take regular backups of application data and monitor our services so we can respond quickly to issues.

Responsible disclosure

If you believe you’ve found a security vulnerability, please email [email protected] with the details. We’ll acknowledge your report and work with you to resolve the issue. Please give us a reasonable opportunity to fix it before any public disclosure.