Security / trust page — found from the homepage — Ciphr

Cited by

Facts read from this source

• Certifications Report an error

  “Ciphr holds ISO 27001 for information security, Cyber Essentials Plus for independently audited protection, ISO 9001 for quality management, and ISO 14001 for environmental management.”

• Security testing Report an error

  “Security testing runs through internal specialists and CREST-accredited external partners.”

• Internal security forum Report an error

  “an internal security forum, led by our director of information security and IT, reviews controls, policies and procedures on an ongoing basis”

• Roles Report an error

  “We act as both a data controller and a data processor, depending on how you work with us”

• UK GDPR Report an error

  “Ciphr is a UK company, built around UK employment law, UK payroll cycles and the requirements of UK GDPR from the outset”

• Trust centre Report an error

  “Our Trust Centre gives HR directors, DPOs and IT teams a direct view of the controls behind our approach to UK data protection: security architecture, certifications, audit evidence and AI governance documentation.”

• AI no training on customer data Report an error

  “Live today: Ciphr's AI features don't train on your employee data, and don't make uncontrolled decisions about people.”

• AI documentation Report an error

  “Every AI feature includes documentation explaining how it works and where human review applies.”

• Implementation process Report an error

  “Initiate, discover, realise, validate, deploy: Ciphr's five-step implementation process covers data migration, access configuration and user acceptance testing”

• Onboarding access controls Report an error

  “Ciphr's implementation includes structured onboarding: a named team who will work with you to set up access controls, retention policies and reporting”

• Access controls Report an error

  “We use role-based access controls, defined permissions, and regular governance reviews to ensure only authorised users can access sensitive data.”

• Security measures Report an error

  “We apply layered security measures, including encryption, monitoring, auditing, and regular penetration testing using both internal experts and external CREST-accredited partners.”

• GDPR data deletion function Report an error

  “"Ciphr really is first to market with a lot of its developments; I was a big fan of the GDPR data deletion and monitoring function."”

• Entity Report an error

  “© 2026 Ciphr Limited. All Rights Reserved. Reg No: 04616229 - Reg Office: 3rd Floor, 33 Blagrave Street, Reading, RG1 1PW - VAT Reg No: 242 6611 24”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.

Scores citing this record

• The Data Protection Officer Employee data protection & co-determination
• The IT Integrator Employee data protection & co-determination
• The Payroll Officer Employee data protection & co-determination
• The People Lead Employee data protection & co-determination
• The Skeptic Employee data protection & co-determination
• The Skeptic European sovereignty
• The Works Council Advocate Employee data protection & co-determination
• The Works Council Advocate European sovereignty