1. Hosting & encryption
The platform runs in ISO 27001-certified UK data centres. All data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
2. Access control
Production access is limited to a small on-call group, protected by hardware keys and reviewed quarterly. Customer support sees your data only with your permission.
3. Resilience & backups
Encrypted backups run continuously with point-in-time recovery. We publish uptime publicly and target 99.9% availability.
4. Testing & audits
Independent penetration tests run annually, and every code change passes automated security checks before release.
5. Certifications
Get Shifts holds Cyber Essentials certification and operates an information security programme aligned to ISO 27001.
6. Reporting a vulnerability
Found something? Email security@getshifts.co.uk — we acknowledge reports within one business day and don't pursue good-faith researchers.