Security & Data Protection
Enterprise-grade security designed to protect your sensitive legal data.
Our full Australian data-handling statement is coming soon.
Cyber Essentials Certified
Cyber Essentials is a UK government-backed certification scheme, overseen by the National Cyber Security Centre and delivered through IASME, that sets out five technical controls covering the most common internet-borne attacks. CaseFlow Automation Ltd has been certified at the whole-organisation level, meaning every product and team is in scope rather than a single service.
- Certificate number
- 176bba48-8fb4-4f1a-a685-32d86b40fe3f
- Certified organisation
- CaseFlow Automation Ltd
- Date of certification
- 7 August 2026
- Recertification due
- 7 August 2027
- Scope
- Whole organisation
- Certification body
- IdCyber Solutions (IASME)
PII Redaction
Personal identifiers are stripped client-side before any data reaches the AI. Names, addresses, dates of birth, policy numbers are all redacted automatically.
Australian Privacy Act 1988
Data handling aligned with the Australian Privacy Principles (APPs). Data minimisation, lawful processing, and robust security measures throughout.
Encryption
All data encrypted in transit (TLS 1.2+) and at rest. Your sensitive legal data is protected at every stage of processing.
Access Control
Invite-only platform with role-based permissions. Admin, manager, senior, and handler roles ensure team members only access what they need.
UK GDPR and the ICO
CaseFlow Automation Ltd is a UK-based provider, so our processing is governed by UK GDPR and we are registered with the Information Commissioner's Office (ICO). As an overseas provider we also support Australian customers with their Privacy Act 1988 and Australian Privacy Principles obligations, with all data handled to UK GDPR standards.
Data Isolation
Row-level security ensures each company only sees their own data. Complete isolation between organisations at the database level.