Security & privacy
High-level overview of what a UK-hosted production system would include (demo stores data locally).
Production-grade security (overview)
- UK data residency (UK region) and UK GDPR controls.
- Encryption at rest and in transit (TLS).
- Role-based access control (RBAC) for staff/admin.
- Audit logs for sensitive actions.
- PII minimisation, retention policies and consent.
- Pen testing and secure SDLC.
Demo note
This demo stores some data in your browser (localStorage) for realism. No external services are called.
