Compliance

Nimbox exists to secure your data and, as you would expect, we’re compliant with some of the most stringent regulatory standards in the world.

We operate our infrastructure exclusively in ISO27001 certified data centres, and your service is provisioned and maintained by an ISO27001 certified team.

Our service and software is fully compliant with HMG’s Cloud Security Principles, and aligned with CESG’s Good Practice Guides. We have built our service around the technical and policy controls that are suggested by these programmes. As such, our service can host information that is classified up to OFFICIAL under the UK Government Protective Marking Scheme.

By hosting on infrastructure that we control, we ensure that data is stored in named locations in the United Kingdom, and that it will never reside outside of her sovereign borders.

ISO27001

Our data centres, and technical service provision team, all hold current ISO27001 certifications. As part of this, we operate a robust Information Security Management System, which helps us to appreciate, and mitigate technical risk at every level of our organisation.

Cyber Essentials

We hold a Certificate of Assurance that testifies to our compliance with the requirements of the UK Government Cyber Essentials Scheme.

Crown Commercial Service Supplier

We’re listed in the Digital Marketplace, and hold a current Crown Commercial Services Framework Agreement, covering government procurement of our services.

Solicitors Regulation Authority

Our service is fully compliant with the SRA’s Code of Conduct.