Trust and security
How we look after your data.
Collabit is ISO 27001 certified for the platform and mobile apps. We host on Amazon Web Services, with UK customers' data and backups in the UK, encrypted in transit and at rest.
Need evidence for a tender or a security review?
Our ISO 27001 certificate, customer data processing agreement and provider schedule are available on request. Ask in your free consultation or send us a message.
ISO 27001:2022
Certified by Alcumus ISOQAR, certificate 26638-ISMS-001, for the design, development, deployment, hosting, maintenance and support of the Collabit SaaS platform and mobile applications.
Data processing agreement
Our customer data processing agreement (version 2.1) sets out how we handle your data, from sub-processors to returning or deleting it when you leave.
Hosted on AWS
Collabit runs on Amazon Web Services. For UK customers, your data and its backups are hosted in the UK.
How your data is protected
- Encrypted in transit with TLS 1.2 or 1.3, and at rest with AES-256
- Access controls, with multi-factor authentication for administrative access
- Each customer's data kept separate from every other customer's
- Daily backups, with restores tested
- Logging, monitoring and vulnerability management
- Security and data-protection training for every member of staff, at induction and every year
What our data processing agreement commits to
From our customer data processing agreement (version 2.1).
- We do not sell your data, use it for advertising or allow it to be used to train general-purpose AI models
- We tell you about a personal data breach without undue delay
- At least 30 days' notice before we add a sub-processor, with time for you to object
- When your service ends, your data is returned or deleted within 30 days, and backup copies within 180 days
- You have the right to audit how we look after your data
Your data, your rules
- We follow the UK Data Protection Act 2018 and UK GDPR. Our privacy policy explains what we hold, why, and for how long.
- Implementation and support are delivered by our own team. No subcontractors are used for deployment.
- Sub-processors include Amazon Web Services for hosting, Google Maps for address lookups, and AI providers only where you turn on a connected feature. The full list is available on request.
Connected, with access you control
- Accounting connections to Xero, Sage, QuickBooks and Exchequer
- Google Workspace and Microsoft 365, for sign-in, calendar and email linking
- A REST API for your own systems, using a key held by your administrators
- An MCP server, so AI assistants you approve can work with Collabit within the permissions you grant
- Actions taken through a connection count as actions under your Collabit account and permissions
Accessibility
- The Collabit platform is developed with reference to WCAG 2.1, aiming for at least Level AA
- A detailed VPAT, covering WCAG 2.1, Section 508 and EN 301 549, is available on request
Questions IT teams ask
Are you certified?
Yes. Collabit is certified to ISO 27001:2022 by Alcumus ISOQAR (certificate 26638-ISMS-001).
What does the ISO 27001 certificate cover?
The design, development, deployment, hosting, maintenance and support of the Collabit SaaS platform and mobile applications.
Where is our data stored?
On Amazon Web Services. For UK customers, your data and its backups are hosted in the UK.
Do you use our data to train AI?
No. Our data processing agreement commits that we do not allow your data to be used to train general-purpose AI models. AI features use the records needed for the task you ask for, and only when you turn them on.
Can we get our data back if we leave?
Yes. When your service ends, you choose whether your data is returned in a usable export or deleted, within 30 days. Backup copies are deleted within 180 days.
Who can we ask about data protection?
Email info@collabitsoftware.com about privacy and data rights, or ask your specialist for our data processing agreement.
Free consultation
Talk to a specialist in your industry.
Our specialists have taken companies like yours from paperwork and spreadsheets to one connected system. In the consultation you get:
- A specialist who knows your industry
- Your own numbers reviewed
- A plan for your workflows and compliance checks
- How the move from your current system would work
- A price for your team
- A live demo using your kind of jobs
- Same working dayWe confirm your time by email.
- The consultationBy Teams, Zoom, Google Meet or phone.
- AfterwardsA written plan and price for your team.
No sales pressure, no charge and no obligation.
Just a quick question? Send us a message.
“The patience from the Collabit team made a huge difference.”
Thank you. Your request is in.
We will confirm your time by email the same working day.