Pulse / Security & trust
Security & data protection

Your clients' data,
protected.

Security and facilities companies handle sensitive site, officer and client data every day. Pulse is built to keep it safe: hosted in the UK, encrypted, isolated per customer, and covered by a data-processing agreement.

Built by operators, for UK operators

Security isn't a bolt-on.
It's how Pulse is built.

Pulse is built by people who have run security and facilities operations, for UK security and FM companies. Because the platform holds patrol evidence, officer vetting records, incident reports and client contracts, data protection is foundational, designed into the architecture, not an afterthought added later.

How your data is protected

Eight things we get right.

UK data residency

Your data is hosted in the UK, encrypted at rest and in transit. It stays within the region, close to where your operation runs.

Tenant isolation

Every customer's data is isolated in the data layer, and that isolation is verified by an automated cross-tenant test suite that runs on every build. One firm can never see another's.

Encryption

Traffic is protected with TLS in transit, and data is encrypted at rest. Evidence photos, reports and records are never stored in the clear.

Access control

Role-based access control with least-privilege, across admin, officer and client roles, so people only see what their job needs. SSO is available on Enterprise.

GDPR & DPA

A data-processing agreement covering Pulse as your processor, plus built-in data export and right-to-erasure tooling to handle data-subject requests.

Audit logging

A tamper-evident, hash-chained audit trail records key actions across the platform, so you can prove who did what and when, with one-click verification.

Backups & resilience

Regular automated backups and monitored uptime keep your operation running and your evidence recoverable if the worst happens.

Responsible disclosure

Found a security issue? We have a dedicated contact for reporting vulnerabilities: security@pulse-operations.co.uk. We take every report seriously. Security researchers can also find us the standard way: /.well-known/security.txt.

Your data rights

You own your data.
Always.

The data in your Pulse account belongs to you. As a customer you can export it, or ask us to delete it, on request, and we will help you do it cleanly.

Export on request: take your patrol history, evidence and records with you
Deletion on request: right-to-erasure tooling built into the platform
Never sold, never shared: we do not sell your data, and never use it to train anything for other customers
In plain English

Your data works for
your operation, only.

Pulse is the tool you run your business on. Your evidence, your officers, your clients, your contracts, they are yours, isolated from every other firm on the platform, and yours to take with you.

Standards & compliance

Honest about where
we are today.

Pulse is designed to align with UK GDPR and the Data Protection Act 2018, and a data-processing agreement is available on request. Formal certifications such as ISO 27001 and Cyber Essentials are on our roadmap; we will publish them here as they are achieved. We would rather tell you plainly what we do and don't yet hold than claim a badge we can't back up.

Questions about security?

Book a demo and we'll walk your team through exactly how Pulse protects your data, or email our security contact directly to request the DPA or report an issue.

Book a 30-minute demo Report a vulnerability