Trust & security
One security baseline, both products
Data Protection Register and The Risk Register are built and operated by the same small team, on the same foundations. This page is a summary; each product publishes its own full security page and Data Processing Agreement.
EU data residency
Both products are hosted in the EU, and stored records stay in-region.
Encryption
All traffic is encrypted in transit with TLS. Both databases are encrypted at rest.
Tenant isolation
Every record belongs to one organisation and is scoped to it at the data-access layer, in both products.
Authentication & access
Sign-in on both products is handled by a reputable managed authentication provider, with multi-factor authentication available.
Audit logging
Significant actions are recorded in an append-only audit log on both products, so each can show its own working.
Full detail per product
For the complete picture, including sub-processors and each product's Data Processing Agreement, see Data Protection Register's security page or The Risk Register's security page.