&Element Trust Center
Transparency about security, compliance, and infrastructure in one place.
Trust Center
&Element
Helping businesses succeed online
We take the security of our solutions seriously, and are continuously working to maintain high security standards.
Cyber Essentials Certificate
AuditsExecutive summary plus independent auditor letter.
ISO 27001 SoA
CertificationsStatement of applicability with implemented controls.
Security overview
OverviewTechnical control overview for prospects.
Cyber Essentials
Audit year: 2026-2027
ISO 27001
Scope: Global operations
Audit year: 2023
LGPD
Scope: Data processor commitments
Logical Access Policy
Owner: Security Ops • SSO everywhere plus enforced MFA
Cadence: Reviewed quarterly
Incident Management
Owner: GRC • Four severity levels with RACI defined
Cadence: Bi-monthly tabletop exercises
Hosting: AWS (Control Tower hardened org)
Encryption: AES-256 at rest + TLS 1.3 in transit
Retention: Audit logs retained for 400 days
Backups: Continuous snapshots with weekly restore tests
Regions: us-east-1, sa-east-1
Data centers: Equinix SP, AWS North Virginia
Partial outage on the audit webhook
2024-03-11 — Impact: No data loss. Timeout increased and workers tuned.
New CAIQ questionnaire
2024-06-06
Custom fintech-ready version now available.
Expanded to sa-east-1
2024-05-20
Brazilian customer data can stay in-country.
AWS
Primary cloud provider (Control Tower hardened org).
Datadog
SaaS monitoring platform for logs, metrics, and traces.
OpenAI
Model inference for trust center assistant features.
Office hours: 10am to 5pm UK