UK Cyber Essentials
Certified
Certified under the UK Cyber Essentials scheme, assessed by IASME.
Trust Centre
Ansarada protects some of the most sensitive information a company owns — from M&A documents and board papers to confidential deal data.
Security documents are available on request. Contact our team to request the documentation or information you need for your due diligence.
Certifications & compliance
Our security programme is built around an ISO/IEC 27001:2022 certified Information Security Management System (ISMS) covering our operations, products and supporting services, alongside SOC 2 attestation and alignment with GDPR and the Australian Privacy Principles.
A
ISO/IEC 27001:2022
Certified
Our certified Information Security Management System (ISMS) covers all operations, products and supporting services.
B
UK Cyber Essentials
Certified
Certified under the UK Cyber Essentials scheme, assessed by IASME.
C
SOC 2
Attestation
SOC 2 Type I attestation. Ansarada is also undergoing a SOC 2 Type II audit.
D
ISO/IEC 42001
Aligned
AI governance aligned to ISO/IEC 42001:2023.
Independent security assessments help give your organisation and stakeholders confidence in the controls protecting critical information, while supporting security reviews and due diligence requirements.
| Framework | Status | Notes |
| ISO/IEC 27001:2022 | Certified | Certified Information Security Management System (ISMS) covering all operations, products and supporting services. |
| UK Cyber Essentials (IASME) | Certified | Certified under the UK Cyber Essentials scheme, assessed by IASME. |
| SOC 2 Type I | Attestation | SOC 2 Type I attestation. Ansarada is also undergoing a SOC 2 Type II audit. |
| ISO/IEC 42001:2023 | Aligned | AI governance aligned to ISO/IEC 42001:2023. |
| GDPR | Aligned | Policies and procedures aligned with GDPR requirements, including appropriate safeguards for international data transfers. |
| Australian Privacy Principles (APPs) | Aligned | APP requirements are embedded within Ansarada's Legal and Compliance framework and supporting policies. |
| Internal Audit Programme | Bi-annual internal audits aligned to ISO 27001 requirements and SOC 2 criteria. |
Protecting your data
Your most sensitive information deserves more than standard protection. From confidential transactions to everyday business operations, Ansarada helps you maintain control over who can access your data, safeguard critical documents and reduce the risk of unauthorised exposure.
1
Encrypted in transit and at rest
TLS 1.2 or higher in transit and AES-256 at rest, including backups.
2
Least-privilege access
Role-based access, reviewed quarterly.
3
Multi-factor authentication
Enforced across internal systems and available for every data room.
4
Managed endpoints
Full-disk encryption on employee devices.
Built for resilience
Ansarada's platform is hosted on AWS using a multi-availability-zone architecture with automatic failover, supported by defined backup, recovery and business continuity processes.
99.7
%
Targeted uptime
<24
hours
RPO for critical systems
<24
hours
RTO for critical systems
Customer data is backed up automatically and encrypted, with backups stored in isolated environments separate from production and replicated across multiple availability zones within the same hosting region.
Our Business Continuity Plan covers offices, systems, personnel and critical processes. Business Continuity and Disaster Recovery plans are tested annually against predefined recovery targets.
Choose where your documents are stored
Customers select their document storage region when creating a data room. Documents remain in the selected region. Customer environments are logically segregated at the tenant and data-room level through application-level access controls.
Default
Australia
Sydney
Available regions
Drag to rotate
Continuous vulnerability management
Ansarada continuously scans applications, operating systems, middleware and infrastructure for vulnerabilities, supported by threat intelligence and security operations review.
1
Continuous scanning
Automated vulnerability scanning is performed continuously and findings are triaged by our security operations team.
2
Independent penetration testing
Qualified third parties perform penetration testing twice annually, with findings tracked against risk-based remediation SLAs.
3
Controlled patching
Patches are tested in non-production before deployment through controlled change management. Zero-day vulnerabilities are prioritised for immediate remediation.
Third-party & sub-processor management
Ansarada maintains a formal third-party risk management programme covering security, privacy, compliance and operational risk, with periodic reviews of every vendor.
Sub-processors are bound by Article 28-compliant Data Processing Agreements. Our current sub-processor list is publicly available.
AI you can use with confidence
AiDA is Ansarada's AI capability, embedded within the data room. It is a constrained, retrieval-augmented assistant that works with a customer's own data room content — not a general-purpose model exposed to users.
AiDA operates within your existing data room permissions, so users can only access information they're authorised to see. Your documents, prompts and outputs are not used to train AI models, helping keep your confidential information protected.
1
Your data stays your data
Ansarada does not use customer personal data — including prompts, uploads or outputs — to train, retrain or fine-tune AI/ML models.
2
Permissions carry through
Retrieval and processing are scoped to the current customer, data room and authenticated user's permissions, with no cross-tenant retrieval or pooling.
3
Humans stay in control
AiDA is assistive, not an automated decision engine. Outputs are probabilistic and human-in-the-loop and, where supported, link back to source content for verification.
AiDA works within your existing data room access controls, so users only receive answers based on information they're authorised to access.
Your documents, prompts and outputs are not used to train AI models, helping keep your confidential information protected.
Governed by recognised frameworks
Governance aligns with ISO/IEC 27001:2022 and ISO/IEC 42001:2023. Ansarada maintains an AI Usage Policy, carries out AI impact assessments and ongoing monitoring, and assesses its role against the EU AI Act and NIST AI Risk Management Framework.
FAQs
Is Ansarada ISO 27001 certified?
Yes. Ansarada maintains an ISO/IEC 27001:2022 certified Information Security Management System (ISMS) covering all operations, products and supporting services.
Does Ansarada encrypt customer data?
Where is my data stored?
Does Ansarada conduct penetration testing?
Does Ansarada use my data to train AI models?
Reach out to our support team
Security documents are available on request. Contact our team to request the documentation or information you need for your due diligence.