generated: '2026-07-18'
method: searched
probe: true
source: https://www.credentially.io/security
url: https://www.credentially.io/security
certifications:
- ISO/IEC 27001:2022
- Cyber Essentials Plus
- NHS Data Security and Protection Toolkit (Standards Exceeded)
- NHS DTAC
- GDPR
- ICO registered
practices:
  penetration_testing: Annual independent CREST-certified penetration tests plus automated weekly scans (NIST SP 800-115, OWASP WSTG, PTES).
  encryption: All data encrypted at rest and in transit; PII gets an additional application-level encryption layer.
  data_residency: EU/UK customer data stored exclusively in London, UK.
  dpo: dpo@credentially.io
evidence:
- source: https://www.credentially.io/security
  keywords:
  - iso 27001
  - cyber essentials plus
  - nhs dsp toolkit
  - nhs dtac
  - gdpr