Enterprise-grade security for your ESG data
ESG Point protects your data through EU-based Azure hosting, encryption, controlled access and secure development practices, supported by structured security governance.
Security controls in place
Cloud infrastructure
Our core ESG platform runs on Microsoft Azure in the EU, using managed cloud services and established infrastructure security controls.
Identity and access
Role-based permissions, least-privilege access, MFA for privileged accounts and regular access reviews protect customer information and administrative systems.
Data protection
Customer data is logically separated by tenant. Encryption protects data in transit and at rest, while sensitive credentials are managed separately from source code.
Network security
Layered network and application security controls restrict access to critical services and help protect against unauthorised access and common threats.
Secure development
Peer reviews, automated code analysis, dependency scanning and security quality gates are integrated into our development and deployment processes.
Monitoring and response
Centralised logging, security alerts and documented incident response procedures support timely detection, investigation and resolution of security events.
Backup and continuity
Documented backup, recovery and continuity procedures help protect customer data and restore services following operational disruptions.
GDPR
We apply technical and organisational measures to protect personal data and support compliance with GDPR and applicable data protection obligations.
Email security
SPF, DKIM and DMARC help protect our domain against email spoofing and unauthorised use.
Security is a continuous practice
Security is embedded in how we develop and operate ESG Point, supported by regular reviews, risk management and continuous improvement.
Need more detail for your IT or procurement team?
Our full security statement is available to clients and prospective clients on request.