A page written for your IT team.

Hosting and data

• Each client runs on its own separate deployment and database, not a shared pool.
• Managed cloud infrastructure with an EU-region database.
• Daily database backups.
• Your sponsor, exhibitor and prospect data stays yours.

Access control

• Admin, member and viewer roles, enforced at the database, not just in the interface.
• Public visitors have no direct access to prospect or proposal tables; the prospect journey runs through controlled, session-based functions.
• Prospect sessions expire automatically.
• Team accounts are invitation-only; public self-registration is switched off.

Sign-in, email and calendar

• One-time codes by email instead of sign-in links, so corporate email scanners cannot consume them.
• Notifications are sent from your own domain through an email service you approve.
• Meeting booking connects to your team's calendar, including Microsoft Teams.
• Team invitations and password resets use the same code-based approach.

Abuse protection

• Rate limits on the chat assistant, sign-in and lookups.
• CAPTCHA on the public email gate.
• Browser access restricted to your portal's own domain.
• Responses that don't reveal whether an email is already known.

AI governance

• A monthly AI spend cap with a hard stop and an email alert when it is reached.
• AI usage is recorded against that budget.
• Your team reviews lower-confidence and high-value proposals before they go out.

Audit and monitoring

• Every admin action is logged with the person who made it.
• Deleted records are snapshotted and can be restored.
• A weekly automated security check emails your team only if it finds a problem.

Compliance

• Built around UK and EU data protection requirements.
• Data processing terms and retention are agreed with each client as part of onboarding.
• A current sub-processor list is provided during IT review.

Going through IT review?

We'll provide documentation for your IT team and answer security questions directly.