Cyber Essentials
Certified 03/09/2026
The government-backed baseline covers five technical controls designed to reduce exposure to common internet-based cyber attacks.
About the Cyber Essentials standardReview CertFlow's Cyber Essentials certification, £5m professional indemnity and cyber cover, uptime measurement, data handling and company details.
CertFlow recorded 100% uptime over the 12 months to 28/08/2026, measured by continuous database availability monitoring. That is a historical measurement over a stated window, not a forward guarantee: if we ever have an incident, this page will say so.
Each item is marked as issued, booked, targeted or in progress, with its current date.
Certified 03/09/2026
The government-backed baseline covers five technical controls designed to reduce exposure to common internet-based cyber attacks.
About the Cyber Essentials standardAssessment booked, target 01/10/2026
Cyber Essentials Plus tests the same five controls through a more rigorous independent technical assessment. It is not currently held.
Compare certification levelsOn our roadmap, targeted January 2027. Not yet certified.
This remains a planned certification target and is not presented as a certification CertFlow currently holds.
Insurance held
CertFlow carries professional indemnity and cyber insurance at £5m. Certificate of insurance available on request.
All customer data is hosted in the United Kingdom, encrypted in transit and at rest.
Automated daily backups with point-in-time recovery, so your records are never a single failure away from loss.
Records are retained for the life of your account, and every action is logged with user, timestamp and IP.
Your data remains yours. Export it in full, at any time, in open formats, with no lock-in and no exit fee.
A DPA covering categories of data, security measures and sub-processors is available to every customer.
Role-based permissions, with client-portal access that exposes only that client’s own data.
See also: Security · Privacy Policy · Data Processing Agreement · GDPR statement
Phone, email and in-app chat, answered in the UK by the team that builds the platform. We aim to respond to every support request within one UK working day, and to anything blocking an engineer on site the same day. The product team reviews change requests.
A 30-minute demo can cover scheduling, field inspection and the issued report using an example from your work.
UK support during working hours