Security
We build software that holds customer records and the daily work of a team. Protecting that information is part of our job, from deciding who can access it to looking after the system once it goes live.
Cyber Essentials certified
Vu AI Ltd is certified across the whole organisation. Cyber Essentials is the UK government-backed scheme covering five technical controls that help protect against common online attacks. You can check our certificate and its scope below.
- Certificate holder
- Vu AI Ltd, company 15766790
- Certification body
- The IASME Consortium Ltd
- Scope
- Whole organisation
- Certified
- 21 September 2026, valid to 21 September 2027
Security across our projects
Our projects do different jobs, but share many of the same security needs. These are practices we regularly use. We agree the hosting, access and data requirements with you for each project.
Encrypted connections
HTTPS protects data between your team and the application. Storage and backup encryption are specified as part of the project's hosting design.
Access that fits the role
Role-based permissions give people access to the records and actions their work needs. Audit logs help you review important changes.
Protected sign-in
We use multi-factor authentication on the cloud services that run our business. We can build it into your application too, with the right controls for your users.
Maintained infrastructure
Managed hosting includes security updates and restricted administrator access. Firewalls and Cloudflare traffic filtering help protect public applications.
European hosting
Many of our systems run in European data centres. We agree the hosting location and external services around your data requirements.
Monitoring and alerts
Automated checks watch availability and server health, with alerts when something needs attention. We maintain the systems we host after launch.
Backups and recovery
Backup schedules and recovery arrangements form part of the hosting plan. We work through what needs protecting and how it would be restored.
Data handling agreed with you
We plan access, retention and deletion around your use of personal data, helping the software support your responsibilities under UK GDPR.
What the certification covers
Our whole-organisation certification covers firewalls, secure configuration, security update management, user access control and malware protection. The NCSC's guide to Cyber Essentials explains the scheme.
Supplier security information
We can help with your security questionnaire and provide hosting, backup and data-handling details for your project. Contact the team with what you need.
Reporting a security issue
Please report suspected vulnerabilities to our security team. Include the affected service and steps to reproduce the issue, without sharing passwords or other people's data. We'll acknowledge your report and keep you updated as we investigate. We won't pursue anyone who reports in good faith and doesn't access or change other people's data.