Information Security Policy

Last updated: August 2026

At Evolving People Ltd the security of the data held within our solutions is a priority. This policy explains where and how we host data, and the measures we take to keep it safe. It should be read alongside our Privacy Policy.

Hosting and infrastructure

We host our servers at secure co-location facilities. A co-location facility (sometimes known as a data centre) is a network-connected, secure commercial facility for housing telecommunications and IT infrastructure. Co-location involves sub-letting space in a safe and secure environment. By connecting to multiple backbones, data can be distributed through many sources; this architecture also means our services are not dependent upon any single internet backbone.

Data location and registration

All data entered into Evolving People Ltd solutions is stored in Europe in accordance with UK data protection law and our registration on the Information Commissioner's Office (ICO) Register of Data Controllers.

ICO Registration Number: Z3337450
Data Controller: EVOLVING PEOPLE LTD
D-U-N-S Number: 217503199

The Data Universal Numbering System (D-U-N-S) is a system developed and regulated by Dun & Bradstreet that assigns a unique nine-digit identifier to a single business entity, recognised as a universal standard for identifying and tracking businesses worldwide.

Access control

Most Evolving People Ltd employees do not have direct access to the production servers. A carefully limited number of employees have access only for necessary system management, maintenance, security monitoring and backup procedures.

Our security and monitoring measures

Backup

All customer data is automatically backed up on a nightly basis and stored at a secure facility in Europe. We also back up data on daily, weekly and bi-weekly rotations across multiple locations, to safeguard against an unforeseeable catastrophe.

User authentication

A valid username and password are required to access your information, and all transactions are authenticated. Biometric surveillance, robust fire suppression, multiple power sources and carefully monitored climate control are among the features that protect the servers storing your data.

Operating system security

We enforce tight operating-system-level security by using a minimal number of access points to all production servers. All system accounts are protected with passwords and we follow security best practices. Operating systems and applications are maintained at the vendor's recommended patch levels.

Intrusion analysis

Software, hardware and human intrusion-detection systems and methodologies constantly monitor our systems, ensuring that no one accesses our servers who is not authorised to do so.

SSL data encryption

All Evolving People Ltd sites use strong encryption to protect data in transit, including SSL/TLS certification. The padlock icon in your browser indicates that your data is secured while travelling over the internet.

Your responsibilities

Security is a shared responsibility. Please keep your account credentials confidential, never share your username or password, use a strong and unique password, and notify us promptly if you suspect any unauthorised access. See our Acceptable Use Policy for more.

Reporting a security concern

If you believe you have found a security vulnerability, or have a concern about the security of your data, please contact us in confidence at learn@evolvingpeople.ltd.uk.