What we can prove, and nothing else.
Every claim on this page is backed by a certificate you can check, a contract you can read, or the way the product is built. This page says only what is in place today.
Cyber Essentials certified.
Votis holds Cyber Essentials, an independently assessed certification of a company’s core security controls. It is a UK government-backed scheme, and the certificate covers the whole organization.
The certificate is on the public register. A certificate runs for a year, and the date this one runs to is shown here so you can check it.
Certified.
- Certificate holder
- Votis Technologies Ltd
- Certified on
- June 16, 2026
- Valid until
- June 16, 2027
- Scope
- Whole organization
- Certificate ID
- afcdbd8b-cf69-4ca2-b52a-a56f927c600f
Encrypted at rest and in transit.
Encrypted at rest (AES-256). That covers the databases and the file storage.
Encrypted in transit (TLS 1.2+). That covers your browser to Votis, the customer portal to the agent, and Votis to its own database. Older versions of TLS are refused.
GDPR and data protection.
For your customers’ data, you are the controller and Votis is the processor, under both the UK GDPR and the EU GDPR. That is set out in the data processing agreement.
Votis processes that data only on your documented instructions. What we collect from you directly, and why, is in the privacy notice.
Nothing leaves without sign-off.
Nothing leaves until you sign it off. Then it goes straight in.
Configuration is not sent to your customer’s system until your team has signed it off. The agent proposes and a person confirms.
Each customer’s data in its own database.
Each customer’s data is kept in its own database, with its own credentials. No table holds another customer’s rows.
Which database a request may reach is decided on the server from the signed-in session, never from anything the browser sends.
One link per project.
Your customer reaches their portal through a unique link for their project. Only your team can issue it.
The link is unguessable, it opens one project and nothing else, and it expires.
Report a vulnerability.
If you find a security problem in Votis, email us and we will reply.
The same contact is published in the standard place, so a scanner or a researcher can find it without reading this page.
Bring your questionnaire.
Bring your security questionnaire to the call. We answer it line by line, against what is in place today.
See it on your setup