E2ERisk is built for UK government, critical national infrastructure and the nuclear sector. Here is how we protect your data - and how far we go when sovereignty is non-negotiable.
These are the controls your security team will ask about, answered up front - how the platform is hosted, how tenant data is isolated and encrypted, and how access is governed and logged.
Hosted in UK Azure regions. Your data stays in the United Kingdom - no offshore processing by default.
Run multi-tenant, in your own Azure tenant, or fully air-gapped for the most sensitive environments.
TLS in transit and AES-256 at rest, with optional customer-managed keys (BYOK) via Azure Key Vault.
SSO, MFA and WebAuthn/passkeys, granular role-based access, and dual control on sensitive actions.
Every material action is recorded in a tamper-evident, append-only audit log - defensible by design.
AI-assisted features run within our UK environment. Your data is never used to train third-party models.
Regular backups and tested recovery underpin platform availability and continuity.
Regular penetration testing, dependency scanning and prompt patching keep the platform hardened.
Source code escrow is available, so your assurance capability outlives any single supplier relationship.
E2ERisk supports multi-tenant SaaS for most organisations, a dedicated customer-tenant deployment inside your own Azure subscription where you need full control, and air-gapped operation for the most sensitive environments. The platform is built to support OFFICIAL and OFFICIAL-SENSITIVE handling.
E2ERisk is available through G-Cloud. Our primary infrastructure sub-processor is Microsoft Azure (UK regions). A current sub-processor list and our security documentation pack are available to prospective customers on request.
Security and assurance teams: we are happy to walk through architecture, data flows and controls in detail. Book a session or email info@e2esc.co.uk.