Compliance

Security, Compliance and Privacy

  • Data Encryption: All data encrypted at rest (AES-256) and in transit (TLS 1.3).

  • Privacy by Design: Minimal data collection. Strict data anonymization for analytics. Clear data retention and deletion policies.

  • User Consent: Explicit consent required for processing sensitive personal data related to immigration status.

  • Compliance: Adherence to UK GDPR, Data Protection Act 2018. Regular security audits.

  • Critical Disclaimer: The platform must be architected to not provide legal advice. The AI is an information assistant, and the doc generator is a self-help tool. Terms of Service will clearly define this boundary. Partnerships with legal firms will be structured appropriately.

Last updated