ACTIVE
Security by design
Application and infrastructure security built into RaptorFM's architecture from day one — including role-based access control across 8 permission tiers, verified multi-tenant data isolation, and encrypted data in transit and at rest.
IN PROGRESS
UK GDPR
Privacy, data retention, deletion and data-subject request processes are being designed around UK GDPR requirements.
IN PROGRESS
ISO/IEC 27001
RaptorFM's information-security management programme is being developed toward ISO/IEC 27001:2022 certification.
PLANNED
SOC 2
RaptorFM is building its control environment toward a future SOC 2 Type II examination.
Independent assurance is the destination. Security-by-design is the starting point.
What's already built
Real, verifiable, in place today
8-tier role-based access control, audited across every API route
Verified multi-tenant data isolation — organisations cannot access each other's data
Encrypted data in transit (TLS) and at rest
Complete audit logging of administrative and privileged actions
Documentation
Request our security documentation
Prospective customers' security and procurement teams can request our current documentation directly.