Trust Centre
Nothing happens without your rules.
Not marketing trust. Operational trust. Every remediation is designed to be previewed, approved, verified, evidenced and reversible — before it ever touches production.
Every change is reversible
Controls buyers actually ask for.
- ✓Preview before applying
- ✓Maintenance windows
- ✓Organisation approval policies
- ✓Automatic verification after changes
- ✓Evidence pack generated
- ✓Supported rollback where the connector allows (not full DB restore)
- ✓Full audit trail
AI investigates and recommends. Your organisation decides what can run, when it can run, and who must approve it.
Operational control
How remediations stay inside your rules.
Security & assurance
How the platform itself is protected and tested.
Encryption, access control, automation safety and incident response.
What we process, why, and the contractual controls available to buyers.
SOC 2, Cyber Essentials, ISO 27001 — honest status and roadmap.
Safe harbour for researchers and how we respond to reports.
Independent testing cadence and how findings are remediated.
Platform operations
Availability, subprocessors and where data lives.
Where VaultLayer runs, how it is segmented, and how we recover.
Live availability, uptime history and incident notes.
Where customer data is stored and processed.
Third parties that help deliver VaultLayer — and what they touch.
Availability targets, measurement and credits for qualifying plans.
Product transparency
What shipped, what’s next, and what we connect to.
Procurement or security review? security@vaultlayer.co.uk · legal@vaultlayer.co.uk