TRUST & SECURITY

Security & Data Protection Overview

Safeli is an all-in-one compliance platform for fire, water hygiene and health & safety. This document summarises how your data is protected, the IT requirements to roll out Safeli across your sites, and how worst-case scenarios are handled.

ISO/IEC 27001:2022 certified infrastructure

Certified infrastructure

Safeli is hosted on infrastructure certified to ISO/IEC 27001:2022 (cert. no. 1127009, valid until June 2028). The platform undergoes periodic penetration tests and security audits by external auditors, as documented in the provider's privacy and security programme.

Encryption

All data is encrypted in transit (TLS) and at rest (AES-256). Encryption and key management are maintained by our managed cloud provider.

Audit trail

Every assessment, action and status change is timestamped and recorded in a complete audit log, evidencing your due diligence instantly.

Access control

Role-based permissions (admin, consultant, client) with per-site scoping. Each user only sees the sites and records they are explicitly assigned to.

GDPR & DPA

GDPR-compliant by design. A Data Processing Agreement is available on request, with Standard Contractual Clauses covering any data transfers.

Data portability

Export your reports as branded PDFs and your records as a spreadsheet at any time. On termination, we provide a full export of your data in these formats.

Data hosting: Safeli data is hosted on certified cloud infrastructure, with Standard Contractual Clauses ensuring GDPR-compliant transfers.

IT Requirements

  • Browser-based - no software to install on store devices.
  • No on-premise servers, VPNs or firewall configuration required.
  • Works on any modern tablet, phone or laptop with an internet connection.
  • Sign in with a Google or Microsoft work account, or an email and password.
  • No integration required to start; APIs available to connect existing systems later.
  • Low bandwidth - optimised for standard store-grade connections.

Worst-Case Scenarios

What if Safeli is unavailable during an audit?
Safeli assessments and compliance reports can be exported as branded PDFs at any time, so your team always holds an offline, audit-ready copy.
What if an action is missed by a store?
Automated reminders, an overdue flag and a full audit trail show due diligence, the legal defence, is recorded automatically.
What if we want to leave?
Your reports can be exported as branded PDFs and your records as a spreadsheet at any time. On termination, we provide a full export of your data in these formats, and access is revoked cleanly.
What if an assessor makes an error?
Every report is reviewed before it is issued, alongside built-in AI checks that flag inconsistencies and missing information. A named, accountable person always signs off your reports, with automated checks acting as a second line of defence.