Data Security with Custr
Our Data Security page is dedicated to showcasing the certifications, accreditations, and official documentation that demonstrate our commitment to protecting data and maintaining high security standards.
Data security &
protection toolkit.
NHS TOOLKIT
MediaBase Direct proudly holds certification for the NHS Digital Data Security and Protection Toolkit, showcasing our unwavering commitment to top-tier data security practices. Through a meticulous self-assessment, we've proven our dedication to responsibly managing personal information and implementing robust security measures.
By surpassing industry standards in our self-assessment, we offer a reliable visitor management system that prioritises data protection and upholds the highest security standards.
Having undertaken a detailed and rigorous audit of procedures and frameworks in place with one of the leading houses – BSI, we have been awarded ISO/IEC 27001 accreditation, the international standard for information security.
Custr becoming ISO/IEC 27001 certified means that we have done our security homework and committed to achieving the highest possible security standards that is available today.
ISO/IEC 27001 compliant.
ISO27001 COMPLIANCE
Cyber Essentials Plus.
CYBER ESSENTIALS PLUS
Cyber Essentials Plus is a certification that validates a company's commitment to cybersecurity best practices, ensuring robust measures are in place to protect against cyber threats. Achieving this certification involves rigorous testing of systems and processes to meet strict security standards.
It underscores our proactive approach to cybersecurity, signifying effective controls to defend against cyberattacks, reduce data breach risks, and ensure confidentiality, integrity, and availability of critical assets.
Frequently asked questions.
Custr is built with data privacy and security as a priority. We follow strict internal processes and technical safeguards to ensure information is protected at every stage.
-
Your data is hosted on our private cloud server using our partner Digital Ocean. The private cloud server is based in the UK and meets all ISO and data security guidelines. For more information on Digital Ocean, please visit their website.
-
With Custr, you have the control to manage the duration for which your visitor and staff check-in records are kept. We offer the capability to set an automatic data retention period for your Custr data, giving you full control over the length of time your check-in history is stored.
This feature ensures that your records are maintained for the exact period you require, in accordance with your specific data retention policies or compliance needs, enhancing both the organisation and security of your data management.
-
Your data is encrypted at rest by default which is part of our ISO accreditation. Data is also transmitted between device and server via an encrypted channel ensuring data security.
-
Custr acts as your data processor for data. Our responsibilities include ensuring your data is secure, providing transparency around where the data is stored and providing features to allow you to control your data in line with your GDPR policies.
You have full control over your data including retention periods and select data deletion. Emails that are sent from the system to visitors also contain unsubscribe links, ensuring that they have full control over messages they receive.
-
ISO 27001 is a specification for an information security management system (ISMS) as defined by the International Organisation for Standardisation (ISO).
It’s a framework of policies and procedures that includes all legal, physical and technical controls involved in an organisation's information risk management processes. View our ISO27001 certificate here.
-
Custr is a cloud-based platform, meaning your employee records, visitor data, and signed documents are all encrypted and stored on our secure servers. This means your data is easy to access, gets regularly backed up, and stays secure.
You can use Custr from anywhere, anytime, making it perfect for managing multiple locations through one company account.
-
After conducting a comprehensive and meticulous audit of our procedures and frameworks, in collaboration with one of the leading institutions – BSI (British Standards Institution), we are proud to announce that we have achieved the ISO/IEC 27001 accreditation.
This prestigious international standard recognises our commitment to information security, reflecting our dedication to maintaining the highest standards in protecting and managing information.
-
Absolutely! Please see our submission right here. The Data Security & Protection Toolkit is an online self-assessment tool that enables organisations to assess their adherence to the National Data Guardian's 10 data security standards.
In the United Kingdom, every organisation with access to patient data and systems is required to complete the NHS Data Security & Protection Toolkit. This ensures they maintain high standards of data security and handle personal information with utmost care.
-
We are continuously implementing new functionalities to assist you in overseeing the privacy and security of your staff and visitors. Should you need further details, do not hesitate to reach out to us at support@custr.com.
-
Custr can still be used if you're not connected to Wifi. If your iPad is disconnected from a network connection, visitors can continue to check in, and their data will be stored locally on the device. Once the iPad is reconnected to a network, all locally stored visitor data will sync to your Custr dashboard.