Everything your security team needs, in one place.
Certifications, DPAs, sub-processors, pen-test summaries and continuity plans — publicly available where we can, gated by NDA where we should. If you can't find what you need, security@theventra.co replies within one working day.
Report renewed June 2026. Available under NDA.
Certified information security management system.
Full DPA available, SCCs where relevant.
UK NCSC-backed certification.
Card data handled by Stripe; we never store PAN.
Third-party audited by AbilityNet, June 2026.
Counter-signable, aligned to UK & EU GDPR.
Architecture, controls, disclosure programme.
AWS, Stripe, Postmark, OpenAI (zero-retention), Sentry.
Google, Microsoft, Okta, generic SAML.
How we handle access, portability and erasure.
RTO 1h · RPO 5m · drilled quarterly. Available under NDA.
We keep pre-filled SIG-Lite, CAIQ and a custom questionnaire ready to send under NDA — most security teams have what they need within one business day. Request access atsecurity@theventra.co.