Security & trust
Security you can verify, not just take our word for.
This page describes controls implemented in the Digital Services Platform and separates them from legal compliance or independent certification claims.
Tamper-evident audit log
Key authentication, tenant, user, service, submission, storage and billing events are written to a per-tenant SHA-256 hash chain. Chain verification detects missing or changed records.
External storage
Configured services can deliver submission packages to S3, Azure Blob, Google Cloud Storage, Google Drive, OneDrive, SharePoint, Dropbox or SFTP. Successful deliveries are marked external-only and their submitted values are scrubbed locally.
Encrypted credentials and transport
Production startup requires HTTPS-facing application URLs. Persisted storage credentials and OAuth tokens are encrypted with Fernet using a server-side key.
Portable delivery packages
External deliveries can include JSON or CSV output, original attachments and a manifest containing SHA-256 checksums.
Tamper-evident, by design.
Key authentication, tenant, user, service, submission, storage and billing actions write records into a per-tenant log. Each record references the SHA-256 hash of the previous record and stores its own. To tamper with a single entry, an attacker would have to re-hash every entry that came after. We'd detect the change on the next chain verification.
A live excerpt from one tenant's chain
- Entries can include actor, IP, user-agent, UTC timestamp, resource metadata and a monotonic sequence number
- One-click chain verification re-hashes the whole tenant log and reports any broken segment
- CSV export includes JSON-encoded event metadata and the stored event hash
- Filterable by event type or category, resource, actor, free-text query and date range
- Available on Starter, Business and Enterprise plans
Events we log
auth.login_succeededauth.login_failedclient.createduser.createduser.updateduser.deleteduser.invitedform.createdform.updatedform.deletedform.share_token_regeneratedsubmission.viewed_listsubmission.created_publicstorage_config.createdstorage_config.updatedstorage_config.deletedsubscription.changedsubscription.cancelledYour data lives where you live.
Plans with external storage enabled can deliver submissions into the storage destination configured for a workspace or service. Successful deliveries are marked external-only in the portal, while pending deliveries retain the data needed to complete the job. That makes data residency a function of your chosen destination for completed external workflows.
Persisted storage credentials and OAuth tokens are encrypted with Fernet using the server-side storage configuration encryption key.
Talk to an integration engineerEncrypted where it counts.
Production HTTPS guardrails
Production startup rejects non-HTTPS frontend, authentication and OAuth callback URLs, as well as wildcard CORS.
Encrypted integration secrets
Persisted storage credentials and OAuth tokens are encrypted with Fernet using a required production key.
Passwordless authentication
SuperTokens provides email magic-link and one-time-code sign-in, browser-session refresh, logout and revocation.
Role and tenant checks
Protected routes enforce viewer, editor, admin and platform-admin permissions and tenant-scoped access.
Verified payment webhooks
Stripe webhook handlers validate provider signatures before state-changing events are processed.
Public service protections
Public services support publish controls, optional CAPTCHA and configurable per-service IP rate limits.
Practical foundations for secure, governed operations.
ServiceRecord combines security, traceability, data controls and portable records to help organisations operate with greater confidence. These capabilities can support your compliance programme while keeping responsibilities clear.
Security
HTTPS guardrails, passwordless authentication, tenant-scoped access checks and encrypted integration secrets help protect the platform and its connections.
Governance
Tamper-evident audit records, event metadata and chain verification provide traceability for important operational activity.
Data control
External storage destinations and portable submission packages help organisations control where completed records are delivered and retained.
Compliance support
Implemented controls and exportable evidence can support GDPR, UK GDPR and internal governance programmes alongside your organisation’s policies and procedures.
Technology and policy work together.
The platform provides technical safeguards and evidence. Your organisation remains responsible for how personal data is collected, used, retained and governed.
What ServiceRecord provides
- Encryption and secure authentication controls
- Tenant-scoped access and role checks
- Tamper-evident audit records and exports
- External storage and portable delivery packages
- Version history and operational traceability
What your organisation manages
- Lawful basis, privacy notices and consent choices
- User access, internal policies and staff training
- Retention periods and deletion procedures
- Supplier agreements and international transfers
- Regulatory assessments and independent certification
ServiceRecord's controls can support GDPR and UK GDPR obligations, but using the platform does not by itself make an organisation compliant or represent an independent certification.
Have specific questions?
Our product team can walk procurement, IT and compliance teams through the implemented controls.