Trust Centre
Security, privacy & compliance
We build the software behind interpreting agencies, so the data we handle is sensitive by nature. This is where we set out the standards we are working towards, the controls we operate, the data we hold, and the providers we rely on.
In progress Our formal certifications are in progress — this page reflects current status, not completed audits.
Compliance
In ProgressStandards we are actively working towards.
Controls
In Progress- Data & privacy
- Product security
- Infrastructure security
- Organisational security
- Internal security procedures
Data Collected
In Progress- Service User PII
- Service Client PII
- Interpreter PII
- Client credit card details
Subprocessors
In ProgressResources
In Progress- Privacy Policy
- Data Processing Agreement (DPA)
- Information Security Policy
- Security Overview
- Subprocessor List
Resources
Security and privacy documentation. These are being finalised — to request a current copy, email security@tupi.solutions.
- Privacy Policy Ongoing
- Data Processing Agreement (DPA) Ongoing
- Information Security Policy Ongoing
- Security Overview Ongoing
- Subprocessor List Ongoing
Controls
The security domains we operate across.
Data & privacy
How personal data is collected, processed, stored, retained, and deleted.
In progressProduct security
Secure development lifecycle, access controls, and application safeguards.
In progressInfrastructure security
Hosting, network segmentation, encryption in transit and at rest.
In progressOrganisational security
Policies, staff vetting, security training, and governance.
In progressInternal security procedures
Monitoring, logging, incident response, and operational runbooks.
In progressSubprocessors
Third-party providers that process data on our behalf.
- AWS Cloud hosting & infrastructure London (eu-west-2)
- Google Email & productivity (Workspace) EU / UK
- Twilio SMS & programmable voice EU / UK
- VoIPstudio VoIP telephony EU / UK
- Anthropic AI-assisted features US / EU
Frequently asked questions
Is tupi.solutions an interpreting provider?
No. We build software for interpreting agencies and interpreters — we do not provide interpreting services ourselves.
Where is our data hosted?
Primarily in AWS, London region (eu-west-2). The full list of providers is under Subprocessors.
Which standards are you working towards?
NHS DSPT 2025/2026, ISO 27001:2022, Cyber Essentials Plus, GDPR alignment, the NCSC Cyber Assessment Framework (CAF), and PCI-DSS 4.0 — all in progress.
How do you protect payment card data?
Card details are handled under PCI-DSS 4.0 controls; formal validation is in progress.
How can I request security documentation?
Email security@tupi.solutions and we will share what is currently available.