Security & Trust

Last reviewed: 9 May 2026

Verdant takes the security of your data seriously. Here is how we protect it.

Infrastructure

Protected by Cloudflare — DDoS protection, WAF, bot management, global CDN. All traffic encrypted in transit with TLS 1.3. Data at rest encrypted using AES-256 where we control the storage layer.

Data protection

ICO-registered. UK GDPR and DPA 2018 compliant. Data minimisation, documented retention policies, and annual staff training.

Access control

Least-privilege access, 2FA/MFA required on all infrastructure and administrative accounts. All access logged and reviewed.

Incident response

Documented incident response plan. Personal data breaches reported to affected individuals within 72 hours of awareness (UK GDPR Article 33).

Sub-processors

Cloudflare (CDN), Stripe (payment processing), PostHog (analytics). See our Privacy Policy for full details.