Security & Reliability
Workplace adjustments involve personal information. Here is how TryMosaic protects it, controls access and keeps a reliable record.
Cyber Essentials
TryMosaic holds Cyber Essentials certification. View our certificate.
Encryption
Connections to the application use HTTPS/TLS. Stored records are encrypted at rest.
Access and sharing
Access to records is controlled by account permissions and scoped to the right people. Email-based two-factor authentication is available to users.
A shared passport does not open from a link alone: the recipient must also verify a one-time code sent by email. The owner can set an expiry and revoke access.
Keeping customer data separate
Enterprise customer data is kept separate. Within an organisation, access is scoped by user and team so people see only the records they are authorised to use.
Reliability and recovery
Backups are taken regularly to support recovery. We keep audit records to help customers understand what happened and when.
Security testing
We scan code, dependencies and infrastructure for security issues and track findings through remediation. Information about independent penetration testing is available on request.
Security information and vulnerability reports
Penetration-testing information and full control details are available on request. If you believe you have found a vulnerability, please email us so we can investigate.
For personal data rights and privacy information, see our privacy policy.