Trust Center
Sensitive data, handled properly.
UK housebuilders and principal contractors trust Ubrix with buyer records, contractor coordination and compliance evidence. This page collects the certifications, practices and documents your procurement team needs, in one place.
At a glance
Certifications and standards.
Cyber Essentials
Current certification for the whole organisation against the UK Government-backed baseline for the five core technical controls.
Certificate 726311be-0ee0-4009-a404-1d5ae226dcc1
UK GDPR aligned
Operates in alignment with the UK GDPR and the Data Protection Act 2018. ICO registration on file.
DPA registered
UK-hosted
Runs on Microsoft Azure UK South region by default. Customer data stays within the UK unless explicitly agreed.
Azure UK region
The four pillars
What trust looks like at Ubrix.
Security
How your data is protected
Encryption in transit and at rest, role-based access, single-tenant logical separation, continuous monitoring and least-privilege access for the Ubrix team.
See our security practicesPrivacy
How we treat personal data
Ubrix operates under UK GDPR and the Data Protection Act 2018. Personal data is processed lawfully, transparently and only for the purposes set out in the service agreement.
Read the privacy policyData processing
How Ubrix processes your data
The standard Ubrix Data Processing Addendum is available on request and signed as part of contracting for customers who require one.
Read data processing termsCompliance
How Ubrix helps you stay compliant
Building Regulations, Building Safety Act, NHQC, Future Homes Standard and NHBC compliance built into how the platform works, evidence-first.
See compliance coverageOperational commitments
What you can expect day to day.
These are how Ubrix operates every day, not aspirations. If something changes here, we tell customers directly rather than quietly update this page.
-
99.9% uptime target
Measured monthly, excluding announced maintenance windows. Continuous monitoring, alerting outside working hours.
Service status -
Least-privilege staff access
Access to customer data by the Ubrix team is restricted to what is strictly required for support, and every access event is logged.
-
Data stays in the UK
Hosted in Microsoft Azure UK South by default. Sub-processor relationships are documented and available on request.
-
Responsible disclosure
The Ubrix team welcomes and acknowledges reports from security researchers acting in good faith.
security@ubrix.co.uk
For procurement
Documents available on request.
We complete standard vendor questionnaires and share the documents listed here to help procurement move quickly. NDAs are handled on request.
Procurement contact trust@ubrix.co.uk- Cyber Essentials certificate
- Data Processing Addendum
- Sub-processor list
- Penetration test summary (under NDA)
- Completed vendor questionnaire
Questions
Trust and procurement questions.
Can you complete our vendor security questionnaire?
Yes. The Ubrix team completes standard customer security questionnaires as part of a procurement process, typically within five working days of receipt.
Where is our data hosted?
Customer data is stored in Microsoft Azure UK South region by default. Data is not transferred outside the UK without explicit customer agreement, and sub-processor relationships are documented and available on request.
Do you have a Data Processing Addendum we can sign?
Yes. The standard Ubrix Data Processing Addendum is available on request and is signed as part of the contracting process for customers who require one.
Are you SOC 2 or ISO 27001 certified?
Ubrix is not currently certified against SOC 2 or ISO 27001, but operates many of the same underlying controls as part of its Cyber Essentials certification and day-to-day practices. Formal certification against one or both standards is on the roadmap as the business scales.
Can we see a penetration test summary?
Penetration testing is conducted on a regular cadence, and summary reports are available under NDA to customers evaluating the platform at scale.
What happens to our data if we leave?
Customer data belongs to the customer. Standard exports are available on request throughout the contract and at exit, with no lock-in clauses.
Need something for procurement?
We complete vendor questionnaires and share documentation under NDA. Send us what you need.
Prefer the phone? 0191 716 6373 info@ubrix.co.uk