Skip to content
Zealogics
Contact

Trust

Security

Zealogics is certified to ISO 27001 and appraised at CMMI Level 3. This page sets out the controls that apply to every engagement.

Independently certified

  • ISO/IEC 27001. Our information security management system is certified by an accredited, independent certification body. The certificate and its scope statement are available on request.
  • CMMI Level 3. Our delivery process is appraised at CMMI Level 3 — defined practices for estimation, reviews, change control and defect prevention.

How client data is protected

  • Least privilege. People and systems receive only the access an engagement needs, granted by role.
  • Use limited to the engagement. Client data is used only for the purpose agreed with the client, under confidentiality obligations that bind everyone who works on it.
  • Your choice of environment. Solutions can run in your cloud tenancy, a private cloud, on-premises, hybrid or sovereign environments, so data residency follows your policy.
  • Secure delivery. Code review, testing and controlled change management are part of how the work is delivered, not a gate at the end.
  • Traceability. The systems we build record access and actions, with retention set to your policy.

AI systems

AI systems we put into production carry scoped access, guardrails, evaluation before release and a complete audit trail. Our Responsible AI page describes how.

Assurance for procurement

For a security review, supplier onboarding or a security questionnaire, we can provide our certificates and scope statements, completed questionnaires and further detail on our controls — under a confidentiality agreement where needed. Email info@zealogics.com or contact our team.

Logging on this website

This site records the IP address and approximate location of form submissions and assistant conversations so that we can tell a genuine enquiry from an automated or abusive one, rate-limit our forms, and investigate attempted intrusions. The full address is reduced to its network prefix after a set retention period. It is not used for profiling, advertising or cross-site tracking. Our Privacy Policy sets this out in full.

Reporting a security concern

If you believe you have found a vulnerability in this site or in one of our products, or suspect a security incident involving Zealogics, email info@zealogics.com with “Security” in the subject line. Please include enough detail for us to reproduce the issue, allow us reasonable time to respond before disclosing it, and do not access or change data that is not yours.