Compliance & Certifications
Our Commitment to Compliance
Convo adheres to recognised UK and international standards to protect data and ensure trust.
ISO 27001
-
Information Security Management System (ISMS) in place.
-
Structured processes for managing sensitive information securely.
Cyber Essentials Plus
-
Independently verified against common cyber threats.
UK GDPR & ICO Compliance
-
Full compliance with the UK Data Protection Act and GDPR.
-
ICO-registered.
-
Data Protection Impact Assessments (DPIA): conducted for new processing activities.
PCI DSS v4.0 (Level 1)
-
Secure handling of payment data at the highest industry standard.
Security Testing
-
Penetration Testing: annually, plus after major updates.
-
Vulnerability Scanning: 3–4 times monthly with commercial-grade tools.
Next: Data Security & Privacy