At i-screen, protecting your personal information is one of our highest priorities. We understand the sensitivity of the data you entrust to us, and we're committed to safeguarding it through robust security practices, secure infrastructure, and a culture of privacy and accountability.
Here's how we keep your data secure.
🔐 Your Data is Private and Secure
We implement strict access controls to ensure that your personal and health-related information is only accessible to authorised personnel on a need-to-know basis. Sensitive data is protected using encryption and other security controls. We handle personal information in accordance with applicable UK data protection requirements, including the UK GDPR and the Data Protection Act 2018.
☁️ Secure Cloud Infrastructure
Our UK platform is deployed using secure Amazon Web Services (AWS) infrastructure in London. AWS provides industry-leading security capabilities, including network security controls, monitoring and resilient cloud services.
Some supporting and legacy services may operate across our wider cloud environment. We apply security controls and access restrictions across the systems used to deliver our services.
🔒 Encryption at Every Step
Data transmitted to and from our systems is protected using industry-standard encryption protocols such as TLS/SSL. Data is also encrypted at rest, helping to protect it while stored in our databases and cloud services.
🛠️ Application and Access Security
We follow secure software development practices to help prevent vulnerabilities such as SQL injection and cross-site scripting (XSS). Our team regularly applies updates and patches to keep our systems protected.
- Role-based access control (RBAC) helps ensure that users only have access to the systems and information they need.
- Multi-factor authentication (MFA) is used to protect access to relevant systems and portals.
- Access is logged and monitored to help detect and respond to suspicious activity.
🧯 Prepared for the Unexpected
Security incidents are rare, but if they happen, we're ready. We have an established incident response plan to act quickly and effectively in case of a breach or attempted intrusion.
We also encourage users and partners to report any security concerns immediately so we can investigate and respond appropriately.
🤝 Responsible Third-Party Relationships
If we work with third-party vendors or service providers who handle sensitive data, we assess their security practices. Data sharing is governed by appropriate contractual and confidentiality arrangements.
👥 A Security-Conscious Team
Our employees receive regular training on data security best practices. When someone leaves the team or changes roles, access to our systems is promptly reviewed and revoked where no longer required through a formal offboarding process.
🔁 Resilience Through Backup and Recovery
We maintain backup systems and disaster recovery procedures to help protect data and support service continuity in the event of a failure or outage.
🔒 Continuous Improvement
Security isn't a one-time effort, it's something we continuously work on. We conduct internal reviews, commission external assessments where appropriate, and apply system updates to stay aligned with evolving threats and industry best practices.
As part of this commitment, we engaged an independent security firm to conduct a penetration test of our infrastructure and applications. The findings from this assessment were used to identify and address potential vulnerabilities, helping us strengthen our overall security posture.
We are also working towards ISO 27001 and SOC 2 certifications to further formalise our security and compliance practices.
📬 Get in Touch
If you have questions about our security practices or wish to report an issue, please contact our security team at security@i-screen.me.
🔒 A Note on Responsibility
While we take extensive measures to secure your data, no system can be completely immune to all risks. We encourage you to take basic precautions, such as safeguarding your login credentials, and to contact us if you notice anything unusual.
