Security and compliance

Assessment booked with an IASME-accredited assessor.

Assessment booked with an IASME-accredited assessor. It follows Cyber Essentials.

Work towards certification runs from December 2026 to June 2027.

Booked for November 2026.

In October 2026 we tested the service with 200 people using it at once, in a test environment. It met our speed targets with no errors.

Information is encrypted when it moves between you and Halo Benefits, using TLS 1.2 or higher. The database, its backups and uploaded documents are encrypted when stored.

People sign in with a code sent by email. Employer admins also use an authenticator app. Demo accounts use the emailed code.

A signed-in session ends after 30 minutes without use, and after 8 hours in any case.

Changes, approvals and downloads are recorded in an audit log for each employer. The service can only add entries to it.

Each employer's records are kept apart from all others. A database query must name one employer, or it is refused.

The database is backed up every 6 hours. Backups are encrypted, held in London apart from the database, and kept for 30 days. We test that a backup restores. The last timed test was on 29 October 2026.

Alarms tell our engineers about errors, slow pages, downtime and bursts of refused sign-ins. Threat detection is switched on for our Amazon Web Services account.

Every code change is scanned for passwords and keys before it is merged. The software packages we depend on are checked every night for known vulnerabilities.

We have a written incident plan, adopted on 21 October 2026. If personal information is affected, we tell each affected employer within 24 hours of finding out.

Registered with the ICO: ZC050335.

We completed and signed off a data protection impact assessment and an AI risk assessment on 10 October 2026. Updates for features added since then are awaiting sign-off.

The database is in Frankfurt, Germany. The app's processing and our backups are in London, United Kingdom.

We publish every company that handles information for us, with what it does, where it works and what it sees.

Sub-processors

Our privacy notice explains what we hold, why, who sees it, how long we keep it and your rights.

Privacy notice