Trust and security

How we protect your systems and data

AT Technical works inside some of our clients' most important systems. We take that responsibility seriously. Our security is built on the UK Government's Cyber Essentials scheme and on the UK GDPR, and we apply the same standards to our own staff and to every contractor who works with us.

Cyber Essentials certified

AT Technical Limited is certified under the Government-backed Cyber Essentials scheme. Certificate number 04a2e42d-3dc7-4a89-9d53-df60e1113a55, valid until 02/11/2026.

Verify our certificate

Secure access

  • Every person has their own named account. We never share logins.
  • Multi-factor authentication is enforced on every account and cloud service.
  • People get only the access their role needs, and we review it every quarter.
  • Access is removed on the day someone leaves or a project ends.

Protected devices

  • Devices run supported operating systems, with security updates installed within 14 days.
  • Anti-malware, firewalls, screen locks and disk encryption are required on every device used for client work.
  • Company devices are centrally managed and can be wiped remotely if lost.

Your data stays with you

  • We work on your data inside your own Microsoft 365 or Azure environment.
  • Client data is not downloaded to our devices or copied to other services.
  • Client personal data is never put into AI tools without your agreement.
  • Wherever possible we use test or anonymised data in development.

Trusted people

  • Staff and contractors sign confidentiality and data protection terms before they start.
  • Contractors are bound by the same security standards as our staff.
  • Everyone completes security and data protection training when they join and every year after.

Incident response

  • Everyone must report a suspected incident to us within 24 hours.
  • We contain and investigate incidents straight away.
  • If an incident affects you, we tell you without undue delay, so you can meet your own obligations.

Data protection

  • We comply with the UK GDPR and the Data Protection Act 2018.
  • When we process personal data on your behalf, we act as your processor under written terms.
  • We are registered with the Information Commissioner's Office (registration number [ICO number]).

Supplier due diligence

Need more detail for a security questionnaire or a supplier assessment? We can share our IT security policy and supporting evidence under a non-disclosure agreement.

Request security information

Report a security concern

If you think you have found a vulnerability in our systems or websites, or you suspect an incident involving AT Technical, please tell us straight away.

Please contact us using our contact form, and include "Security" in your message. We will acknowledge your report within [two] working days. Please don't access or change data that isn't yours, or disrupt our services.

AT Technical Limited, registered in England and Wales, company number 11242765. Registered office: International House, 61 Mosley Street, Manchester, M2 3HZ. Read our privacy notice. This statement was last reviewed on [DD/MM/YYYY].