Trust centre
Check us out before you trust us with your numbers.
One place for the facts a careful customer, accountant or security reviewer asks about: where data lives, how it's protected, the policies we follow and the documents behind them.
At a glance
- Data location
- EU (Stockholm), on Amazon Web Services
- Encryption
- In transit (TLS) and at rest, including backups
- Backups
- Point-in-time for 35 days, plus nightly copies locked against deletion
- Separation
- Each business kept apart by database rules, tested on every release
- Sign-in
- Two-factor, Google or Microsoft sign-in, new-device checks
- Card payments
- Handled by Stripe (PCI DSS Level 1); card numbers never reach us
Where we stand
A young company with no badges to hide behind, so here's the honest list, including what isn't done yet.
- UK GDPR and Data Protection Act 2018Policies, DPA, sub-processor list and self-serve export and deletion in placeIn place
- ICO registrationRegistered October 2026; number to followIn place
- Card data (PCI DSS)Out of scope for us: Stripe collects and stores card detailsIn place
- Incident response planWritten and in use; customers told within 48 hours of a breach affecting themIn place
- Cyber EssentialsWorking through the controls; certification to followIn progress
- Independent penetration testPlanned as we growPlanned
- Cyber insuranceNot yet in placePlanned
- SOC 2 / ISO 27001Not certified; controls follow the same principlesPlanned
Policies you can read now
- Terms of service →Version of 23 October 2026
- Privacy policy →Version of 23 October 2026
- Data processing agreement →UK GDPR Article 28 terms for your clients' data
- Sub-processors →Who we use, for what, and where
- Security overview →How the service is built and run
- AI statement →What the optional AI features do with data
- Cookie policy →Essential only in the app
- Accessibility statement →WCAG 2.2 AA, with known gaps listed
- How payments work →Why Fenquist never holds your money
- Your data rights →Access, correction, deletion and more
Documents on request
Some documents describe our defences in detail, so we share them with customers, prospective customers and their advisers rather than publishing them. Ask and we'll send them, usually within two working days. Sending us your own security questionnaire is fine too.
The company
- Legal name
- Fenquist Ltd
- Company number
- 17539985 (England and Wales)
- Registered office
- Ground Floor, 108-112 Main Road, Sundridge, Sevenoaks, Kent, TN14 6ES
- ICO registration
- Registered; number to follow
- Payments
- Not an FCA-regulated firm: Fenquist never holds or moves customer money
Talk to us
- Security issues: security@fenquist.com (see our security.txt)
- Privacy and data: privacy@fenquist.com
- Everything else: hello@fenquist.com
Changes to our terms and policies are listed on What's new.