Encryption at rest and in transit
Customer data is encrypted in transit using TLS and at rest using AES-256 encryption.
Platform security.
Your stewardship data is sensitive. Protecting it is fundamental to how Impactive is built - across our platforms, our infrastructure and the way we develop and operate the service.
Updated September 2026
Private customer environments
Each customer has a dedicated application instance and database, keeping their data separate from other customers.
Secure access controls
Role-based permissions control who can view, create, change, import or delete information. SSO and MFA integration is also available.
Monitoring and alerting
Automated health checks, security logging and alerts help us identify and respond to infrastructure and application issues.
Vulnerability management
Software dependencies and infrastructure are routinely scanned for vulnerabilities, with defined assessment and remediation targets.
Secure development and deployment
Automated build, testing and deployment processes help ensure that changes are introduced safely and consistently.
Audit trails
The platform records user activity for data creation, updates and deletion, alongside administrative infrastructure logs.
Resilience and incident response
Automated backups, highly available infrastructure, disaster recovery procedures and a documented incident response process protect service continuity.
Responsible AI with human oversight
AI is used to support people, not replace accountable decision making. Users remain in control, with human review and approval of important outputs and actions.
Data protection and GDPR
Impactive is fully GDPR compliant, with personal data handled in line with UK and EU requirements, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our Privacy Policy sets out how we collect, use and share personal data.
Questions about security?
If your security, risk or procurement team needs more detail - including on our infrastructure, our sub-processors or our incident response process - please email info@impactive.pro and we will respond directly.