Trust Centre
Getting Started
Welcome to the Talkative Trust Center
An overview of how Talkative protects your data and the standards we meet.
Security FAQ
Quick answers to the questions security and procurement teams ask most.
Compliance & Certifications
ISO/IEC 27001:2022 Certification
Talkative's ISO 27001:2022 certification and how our ISMS is governed.
ISO 27001:2022 Controls Coverage
How our ISMS addresses the ISO 27001:2022 management clauses and all 93 Annex A controls.
Our Security Policy Framework
The full set of ISMS documents and security policies we maintain, approve and review.
Infrastructure & Hosting Compliance
Where the platform is hosted and how responsibility is shared with AWS.
Platform Security
Encryption
How customer data is encrypted in transit, at rest, and on company devices.
Network & Infrastructure Security
Environment separation, hardened network surface, intrusion detection and secure configuration.
Logging, Monitoring & Alerting
Centralised logging, continuous monitoring, automated alerting and time synchronisation.
Availability, Backups & Resilience
Multi-AZ deployments, daily backups, tested restores and our BC/DR programme.
Vulnerability Management & Penetration Testing
How vulnerabilities are identified, prioritised and fixed, including independent annual penetration tests.
Organisational Security
Access Control
Least privilege, MFA everywhere, regular access reviews and prompt deprovisioning.
People & security Culture
Hiring checks, policy acceptance, security training and managed devices.
Secure Development
Secure development policy, peer review with security checks, change management and environment separation.
Vendor & Third-Party Management
Vendor inventory, risk levels, security assessments and data-protection agreements.
Asset Management
Inventory, ownership, classification and secure decommissioning of assets.
Data Protection
Privacy & GDPR
Our role as a data processor, UK GDPR compliance, our DPO, and how we handle data subject requests.
Data Hosting & Residency
Where the Talkative platform runs and how hosting responsibilities are shared with AWS.
AI Data Compliance
How Talkative uses AI: the models we offer, what data each feature processes, where it runs, and our zero-retention approach.
Data Management & Privacy
Data governance, processing records, retention, secure deletion and PII removal.
Incident Response
How to report a security concern and how Talkative responds to incidents.
Responsible Disclosure
How security researchers and customers can report a vulnerability to us.
Physical & Office Security
Office access controls, visitor management, and data-centre physical security via AWS.