This policy explains how we keep KeelOS, and the data in it, secure.
Our approach
KeelOS replaces the systems an organisation runs on, so it holds data that matters. Security is built in from the start and never treated as finished.
Built with a certified partner
KeelOS is designed and built with our development partner 3 Sided Cube, which holds ISO 27001 and Cyber Essentials certification.
How we build it
- Secure by design. New features start with a risk assessment and, where personal data is involved, a Data Protection Impact Assessment.
- Little and often. Code is scanned and reviewed continuously as it is written, against recognised standards including the OWASP Top 10.
- A final sweep. Code and infrastructure are reviewed in depth before release.
- Never done. We patch, monitor and revisit our threat models after launch.
Protecting your data
- Data is encrypted in transit and at rest.
- Access is limited to the people who need it, and reviewed.
- Each organisation’s data is kept separate from every other’s.
- If a breach affects your data, we will tell you without undue delay and, where required, report it to the Information Commissioner’s Office.
Reporting a vulnerability
If you think you have found a security issue in KeelOS or this website, please email hello@getkeelos.com with the details. Please don’t access other people’s data or disrupt the service while investigating. We will acknowledge your report and keep you updated while we fix it.
Contact
Agentic Schools Ltd, a company registered in England and Wales (company number to be added), registered office to be added. Email hello@getkeelos.com.