Security
How we keep your data and the systems we build safe. Honest and general, with the detail available on request.
This is a plain-English summary. The formal security documentation, including the Safety Pack and DPA, is available on request while we finalise the published version. Email support@scalesage.ai.
GDPR posture
ScaleSage is a UK-registered company serving clients across the UK and the EU, and we are GDPR-compliant by design. Security follows the same principle as privacy: built in, not bolted on.
The Safety Pack
Every engagement is covered by a Safety Pack: our documented, plain-English summary of how we protect access to your data and the systems we build for you. It is available on request.
Data Processing Agreement
For clients, a Data Processing Agreement (DPA) sets out exactly how we handle data on your behalf. The DPA is available on request.
You own your data
Your data stays yours, and so does the work. On full payment, everything we build for you becomes yours. We never sell your data or use it to train external AI models.
Where your data lives
Data is held in the EU and the UK. Personal data lives in our database, not in analytics tools.
Certifications
We only claim what we hold. Cyber Essentials is currently under review. We will state its status honestly rather than imply a certification we do not yet have.
Reporting a concern
If you spot a security issue or have a question, contact support@scalesage.ai and we will respond.