Security & trust

A readiness tool has to be defensible about its own data.

Control Tower holds evidence about how a practice runs. Your register is stored in the UK, encrypted in transit and at rest, and only ever visible to the people you name. Where a feature relies on a third party — the AI behind Assist, for instance — we name that sub-processor plainly below.

In place

UK data residency

Your register and its documents are stored and backed up within the United Kingdom.

In place

Encrypted throughout

TLS 1.2+ in transit and AES-256 at rest, with managed key rotation.

In place

Least-privilege access

Role-based access; evidence is visible only to the people you name.

Data handling

Where your evidence lives, and who can see it.

What we hold

The material you put in the register — framework answers, uploaded policies, audits, certificates and the audit trail of who changed what. We do not require patient-identifiable data to run the register.

Where it is stored

Your register and documents are stored on UK-region infrastructure, isolated per customer. The database itself does not leave the UK.

Who can see it

Only the users you invite, scoped to their role. Our staff do not access customer data except where you request support and grant time-boxed access, which is logged.

How Assist uses it

When you run Assist or Inspector review, the relevant text from your register is sent to our AI sub-processor to draft, cite or challenge — named under Sub-processors below. Your content is not used to train shared models and is processed under a data-processing agreement.

Retention & export

You can export the full register and audit trail at any time. On termination, data is deleted on a defined schedule set out in the agreement.

Sub-processors

The third parties that process data on our behalf.

Listed in full so your information-governance team can assess them. Your register is held in the UK; where a feature relies on a provider that processes data in the UK, EU or US, that transfer is covered by data-transfer agreements (SCCs / IDTA) we have in place with each. Your content is never used to train third-party models.

Cloud hosting & databaseStores the register, uploaded documents and the audit trail, isolated per customer.UK

OpenAIPowers Assist drafting, Inspector review and evidence search (embeddings). Content is processed under an agreement and is not used to train models.US · transfer covered

Transactional emailSends account, invitation and onboarding notifications. Receives names and email addresses only — never register content.EU/US · covered

Compliance posture

Stated honestly — in place, or in progress.

We do not claim certifications we do not hold. Each item below shows its true state, and evidence is available under NDA during a scoping call.

UK GDPR & DPA 2018Processed lawfully as a data processor under a written agreement, with a defined lawful basis and retention.In place

ICO registrationRegistered with the Information Commissioner’s Office as a data controller for our own records.In place

Data processing agreementA DPA covering sub-processors, breach notification and international transfers is available to every customer.In place

NHS DTAC alignmentAssessed against the Digital Technology Assessment Criteria; the completed toolkit is available on request.In progress

Accessibility

Usable under scrutiny, by everyone on the team.

Control Tower is built to WCAG 2.1 AA. Status is never signalled by colour alone — every readiness state carries a label and a glyph — and every interactive element has a visible focus ring and works from the keyboard.

WCAG 2.1 AA — contrast, focus order and semantics tested against the standard
Status is never colour-only — every RAG state pairs colour with a label and a glyph
Full keyboard operation with a visible 2px focus ring on every control
Respects reduced-motion — transitions collapse and loaders stop animating

Bring your security team to the call.

We are glad to walk information-governance and IT teams through our data handling and sub-processors. Join the waitlist and we will set up a review.

Join the waitlist