How we look after the evidence you trust us with.

Everything is stored and processed in Amazon Web Services in London (eu-west-2): the database, uploaded files, background jobs and email.

Data is encrypted in transit with TLS and at rest, with keys managed in AWS Key Management Service. The database keeps automated backups with point-in-time recovery.

Every request checks that the person may act in that workspace. The database then checks again: each customer’s rows are protected by row-level security, so a fault in the application still cannot return another customer’s records.

Suppliers see only the questions they were asked and their own answers and documents. Your reviewers’ notes, findings, risks and decisions are never available to them.

Consultants reach a client’s workspace only through access that client granted, with a role and an end date, and lose it the moment it is revoked or expires.

Uploads go into a separate quarantine area first. Each file’s type is checked from its contents, it is scanned for malware by a scanner with no internet access, and it is fingerprinted with SHA-256. Only then can it be opened.

Files that fail are kept in quarantine and never served. Downloads use links that expire within five minutes, issued after a permission check, and every download is recorded.

A fingerprint proves a file has not changed since it was uploaded. It does not prove a document is genuine, so we only describe something as checked when one of your people recorded that they checked it.

Accounts are created by invitation only. People sign in with a password and a six-digit code sent by email, or with their Microsoft work account.

Passwords are stored as salted scrypt hashes. Repeated wrong passwords pause sign-in for that account and its owner is told. Changing a password signs out every other browser.

Changes, decisions, exports and downloads are written to an audit history. The application can add to it but has no permission to change or delete it.

We describe it as append-only, not tamper-proof: someone with full control of the database server could still alter it. Exports of decision records are themselves recorded.

Decisions keep the exact evidence versions, policy version and questionnaire version they relied on, so a past decision can be shown exactly as it was made.

Vendwise is in its pilot phase. An independent penetration test is planned before general release.

The platform being available does not mean someone is on call around the clock. We agree support arrangements with each pilot customer.