Security, Privacy & Compliance
We take the security of your data seriously. Our platform is built with security and privacy at its foundation, not as an afterthought.
Cyber Essentials Certified
Exyon is Cyber Essentials certified, demonstrating our commitment to protecting against the most common cyber threats. This UK Government-backed certification verifies that we have essential security controls in place.
- Verified security controls
- Protection against common cyber attacks
- UK Government-backed scheme
Security at a Glance
Key security and compliance information for procurement and IT teams.
Certification | Cyber Essentials Certified |
Data Hosting | UK Only |
Encryption at Rest | AES-256 |
Encryption in Transit | TLS 1.3 |
Backups | Daily, 30-day retention |
GDPR Status | Fully Compliant |
UK Data Residency
All customer data is stored exclusively in UK data centres (London). We do not transfer personal data outside the UK unless explicitly required and with appropriate safeguards in place.
- Data never leaves UK jurisdiction
- UK GDPR and Data Protection Act 2018 compliant
- Supports institutional data sovereignty requirements
Sub-Processors
We use the following third-party providers to deliver our services. All sub-processors are contractually bound to protect your data.
Hostinger
Cloud Infrastructure & Hosting
UK (London)Brevo
Transactional Email
EUStripe
Payment Processing
UK/EUGoCardless
Payment Processing
UK/EUGDPR Compliance
Our Role
When providing services to educational institutions, Exyon acts as a Data Processor. The institution remains the Data Controller and determines the purposes and means of processing personal data.
For direct customers and website visitors, Exyon acts as the Data Controller.
Your Rights
- Right to access your data
- Right to rectification
- Right to erasure
- Right to data portability
- Right to object to processing
Legal Documents
Access our legal and compliance documentation.
Security Questions?
If you have security or compliance questions, or need to report a security concern, please contact our team.