Trust
Security & compliance pack
Everything a vendor-security or procurement team needs to evaluate LeakIQ. Most of it is published openly below. The rest we provide on request, under NDA, as part of your review. We respond within one business day at security@leakiq.io.
LeakIQ does not yet hold a SOC 2 report or ISO 27001 certificate; both are on our roadmap, and a CREST-accredited penetration test is being commissioned. We are happy to walk a reviewer through our current posture honestly. See the Trust Centre for the full picture.
Published openly
Information Security Policy
The umbrella policy governing how we protect data and systems.
Incident Response Plan
How we detect, contain, recover from and notify on incidents.
Business Continuity & DR Plan
Recovery objectives (RTO/RPO), backups and restore testing.
Vulnerability Disclosure Policy
How to report a security issue, and our safe-harbour commitment.
Technical documentation
Architecture, connector auth, encryption, RBAC, MFA and audit.
Data Processing Agreement
Our UK GDPR Article 28 processor terms.
Sub-processors
The third parties we use, what they handle, and change notice.
International Data Transfers
Where data is stored and processed, and the transfer safeguards.
Data Retention & Deletion Policy
How long each data category is kept, and how deletion works.
On request, under NDA
Security questionnaire
We complete your questionnaire (CAIQ, SIG Lite or your own template) as part of the review.
Penetration test summary
An executive summary and attestation letter, available under NDA once the CREST-accredited test being commissioned completes.
Business continuity / DR test evidence
Evidence of our most recent restore validation and continuity exercise.
Data-flow diagram
How data moves through the platform, for your data-mapping.
Continuity and exit assurance
Our funding position and the data-export-on-exit commitment, for supplier due diligence.
Read-only scope detail
The exact read-only permissions requested per connected system.
Request the pack
Tell us which items you need and whether an NDA is required first. We will turn most requests around within one business day.