Trust

Trust & security

Security, compliance and data residency.

Aegis is built for operations where a wrong action carries real consequences. Your data stays in your region, every action is checked against your rules before it runs, and everything is signed into a record you can audit.

Get early access
Your data stays in your regionWe never move it out of the region you pick
United Kingdom
AWS London
  • The default for UK businesses, dental practices and GP surgeries
  • Your data never leaves the UK
European Union
EU regions
  • For cross-border operations
  • Your data stays inside the EU
Sovereign / on-prem
Private cloud
  • Civo or your own infrastructure
  • For NHS, multi-site and enterprise
Governance & evidence
Governed, then proven.
Every action checked before it runs, and signed after.

You set the rules up front. Anything outside them fails closed and waits for a person. Every action is written to a record you can hand to a patient, a client or an auditor.

Fail-closed policy checks
Explicit scope & spend limits
Human approval on high-stakes actions
Cryptographically signed ledger
Timestamped, tamper-evident records
Role-based access (RBAC)
Single sign-on (SSO)
Evidence exported on demand
Held to the standard your sector demandsSequenced by the doors each one opens

Built on AWS infrastructure that is itself ISO 27001, SOC 2 and PCI DSS Level 1 certified, with UK and sovereign deployment options for data residency.

Foundation
In progress
  • Cyber Essentials Plus
  • Trade-body supplier accreditation
Healthcare
In progress
  • NHS Data Security & Protection Toolkit (DSPT)
  • DTAC — Digital Technology Assessment Criteria
Enterprise
In progress
  • ISO/IEC 27001
  • SOC 2 (Type 1 → Type 2)
Premium
In progress
  • ISO 27017 / ISO 27018
  • ISO 22301 (business continuity)
  • PCI DSS (service provider)

Aegis is pre-launch. The standards above are what we are actively working towards, not yet awarded. We show status as each is achieved, and we never claim a certification we don’t hold.

Clinical settings

Aegis operates under a non-clinical intended-use boundary. It handles administrative and operational work: booking, scheduling, reminders, records and routing. It does not provide diagnosis, triage, treatment planning or medical advice; anything clinical is handed to a person.

Run a governed pilot.

Get early access and we’ll scope a pilot around one of your busiest workflows, governed and proven from day one.