Security explained in plain English, without jargon or vague promises.
Profscape Ltd is certified under the UK Government’s Cyber Essentials scheme, certified for the whole organisation on 16 August 2026 by IASME after an independent assessment against the National Cyber Security Centre’s five technical controls. The certificate can be verified by QR code, cover under the scheme’s cyber insurance stands behind it, and certification is renewed every year.
Every connection uses TLS encryption, which is the same technology behind the padlock when you use online banking, so anyone intercepting the traffic sees only meaningless code and never your numbers.
Your data is also encrypted at rest, meaning it sits on our servers in scrambled form rather than as readable files. It is locked in transit and locked in storage.
Signing in takes your password together with a code from your phone, so a stolen password on its own is not enough, because the thief would also need the phone in your pocket.
Your data lives in UK data centres and it remains yours, so you can export everything or delete everything from inside the product without having to ask.
What each person can see is decided by their role at the level of the data itself, so a team member who logs time is never sent a commercial figure in the first place, rather than being shown one behind a screen that could be lifted.
Every rule in Profscape, the security rules included, is pinned by an automated test suite that runs on every change, and more than 1,750 tests pass before any code ships.
Ask us anything at hello@profscape.com and you will get a straight answer in plain English.