Security and trust
Security at Gather
Gather holds commercial and site records for some of the most demanding contractors in UK infrastructure. Your IT and security team will want answers before your commercial team can adopt anything, so here they are, along with where to get the full detail.
Accreditations
Gather Insights holds the following, all independently certified.
- ISO 27001Information security management
- ISO 9001Quality management
- Cyber EssentialsUK government backed scheme
- Cyber Essentials PlusIndependently audited tier
- G-Cloud 14Crown Commercial Service framework
Our G-Cloud listing is publicly verifiable on the Crown Commercial Service Digital Marketplace as Gather Insights Limited, service Gather.
How the platform is built
- Hosting
- Gather runs on Amazon Web Services, fronted by the Cloudflare content delivery network and proxy.
- Data in transit
- All traffic is served over HTTPS and protected by HTTP Strict Transport Security, so data moving between your browser and our services is encrypted.
- Sign in and identity
- Gather supports Microsoft single sign on and two factor authentication, so your team logs in with the identity controls you already run rather than another set of credentials to manage.
- Who we are
- Gather Insights Limited, company number 10215108, registered in England and Wales at 1 Silk Street, Manchester M4 6LZ.
For a full security review
If your review needs more than the above, and most Tier 1 reviews do, everything lives in our Trust Centre. That is where you will find our data processing agreement, subprocessor list, data residency and retention detail, access control policy, backup and disaster recovery arrangements, penetration testing position, and how the AI layer handles your records.
It is self serve, so your security team can start their review the moment they want to rather than waiting on us to send a pack. We would rather that ran in parallel with your commercial evaluation than after it.