Security & privacy

High-level overview of what a UK-hosted production system would include (demo stores data locally).

Production-grade security (overview)
  • UK data residency (UK region) and UK GDPR controls.
  • Encryption at rest and in transit (TLS).
  • Role-based access control (RBAC) for staff/admin.
  • Audit logs for sensitive actions.
  • PII minimisation, retention policies and consent.
  • Pen testing and secure SDLC.
Demo note

This demo stores some data in your browser (localStorage) for realism. No external services are called.