Security

Safe. Secure. Simple.

Local Authorities

Local Authorities

 Government

Government

 NHS

NHS & healthcare

 Emergency Services

Emergency Services

 speech-bubble

Internal comms

Secure by design

With criminals targeting the digital supply chain, you have to be confident that your suppliers are as serious about protecting your data as you are. We continually invest in the technology and resources to ensure the tightest security and privacy by design into our service and we've got the badges to prove it.

We follow the NCSC Cloud Security Principles, are ISO27001:2022 certified and are Cyber Essentials Plus accredited.

Detailed security information is available securely on request.

Technical and operational security

e-shot uses multi-layered detection prevention and protection systems.

Our specialist team works to ensure the confidentially and integrity of data stored in our systems through a number of processes, security by design and proactive monitoring.

Technical and operational security
Physical resilience and availability 

Physical resilience and availability 

The e-shot platform architecture offers high availability and redundancy as standard.

Our hosting partners are fully compliant and certified in the provision of data centre services under ISO 27001:2013 and ISO 9001:2008.

External and internal monitoring systems are deployed to alert the networking and support teams 24/7/365 to any issue on any of our systems. We monitor accessibility, network performance, security issues, blacklists, DNS integrity, etc from 5 different global locations.

Protection systems and methods

Core network is protected by Anti DDoS protection, SSL certification and encryption, WAF (Web Application Firewall), DNSSEC and other cyber security measures.

Other protections include:

  • Enterprise grade physical firewalls

  • Enterprise level protection against ransomware, antivirus, antimalware

  • DMARC domain protection with Reject policies by default

  • MFA secure login

  • IP restricted access

  • Alert notifications by severity

Protection systems and methods
Staff and Support

Staff and Support

All staff dealing with the platform and customer data have been screened to the Baseline Personnel Security Standard required for Government work. We do not outsource for quality assurance and security reasons.

Physical access is limited to key staff. Internal network access is conditional and limited to specific access needs.

Emergency support is available 24/7/365.

 

Case study

The Education and Skills Funding Agency

"As a government department we are held to a higher standard. Our ability to ensure that our audience receives the right information at the right time, that their data is accurate and secure and we provide a ‘single source of truth’ are the cornerstones to our communication strategy. And e-shot is key in making that happen."      

The environment is fast paced and it is essential that consistent communications can be created and signed off quickly and easily by multiple teams and authors. The ease and sophistication of the messages that can be built with e-shot fulfils this requirement.

Full story

Accreditations

Trusted and Secure

We continually invest in the technology and resources to ensure the tightest security and privacy by design into our service, and we've got the badges to prove it.

Your data is safe with us