Skip to content

Certifications

SafeHanded holds no certifications today, and won’t imply otherwise. It’s built to produce evidence for your ISO 27001, Cyber Essentials and SOC 2 programmes.

The controls behind that evidence are in the product and verifiable:

  • Zero-knowledge architecture — the server holds ciphertext it can’t read, verified by an automated test. See Security overview.
  • EU hosting — service data is stored in the European Union. See Data residency.
  • Tamper-evident audit — hash-chained, exportable, streamable. See Audit log & compliance.
  • Minimal data & payload deletion on purge, a published sub-processor list, and a DPA. See Sub-processors & DPA.