01
Data encryption
Data is encrypted in transit (TLS 1.2+) and at rest across our cloud infrastructure and local device storage.
// Trust Center
Security, privacy & compliance in the open.
Everything a procurement team, IT lead, or DPO needs to assess Pro Certs, in one place. Real practices, kept up to date.
- UK hosted
- UK GDPR
- Daily backups
Overview
Security Overview
How Pro Certs protects your certificates, client data, and business information end to end.
02
Authentication
Account access is protected by standard authentication, with multi-factor authentication on our roadmap.
03
Role-based access
Account holders control what each user and engineer can see and edit, down to individual certificates.
04
Backups & disaster recovery
Automated daily backups with a documented recovery process, plus optional local backup/restore for your own records.
Overview
Security Practices
The specifics behind how we handle encryption, credentials, and monitoring.
Encryption in transit
All traffic between the app, portal, and our servers is encrypted using TLS.
Encryption at rest
Certificate and account data is encrypted at rest on our cloud infrastructure.
Password hashing
Passwords are never stored in plain text — industry-standard hashing is used throughout.
MFA roadmap
Multi-factor authentication is in active development, prioritized alongside our core platform rebuild.
Infrastructure monitoring
Cloud infrastructure is monitored for availability and unusual activity.
Audit logging
Key account and certificate actions are logged for traceability and support diagnostics.
Overview
Infrastructure & Availability
Where your data lives, and how we keep it available.
UK hosting & residency
Customer data is hosted within the UK.
High availability
Cloud infrastructure is built for resilience, with the offline-first app design meaning site work is never blocked by outages.
Backup strategy
Automated daily backups, retained on a rolling basis, in addition to on-device local backup/restore.
Scheduled maintenance
Maintenance windows are announced in advance and scheduled to minimise disruption.
Public status page — view live system status.
Legal
Data Processing Addendum
How we process data on your behalf as a UK GDPR data processor.
Data Controller & Processor roles
As the account holder, you act as the Data Controller for the client and certificate data you enter. Pro Certs acts as the Data Processor, handling that data only as instructed and as needed to provide the service.
Data retention & deletion
Certificate and account data is retained for the lifetime of your subscription plus a defined recovery window, after which it is deleted on request or as set out in the DPA.
International transfers
Data is hosted in the UK. Any limited transfers outside the UK (e.g. for support tooling) are covered by appropriate safeguards.
Your rights
You retain full rights over your data, including access, correction, export, and deletion requests at any time.
This summary reflects the current DPA. Full legal text is pending formal solicitor review before publication as a binding document.
Legal
Privacy Policy
What we collect, why, and the choices you have — from the policy effective 28 September 2018 (last updated 20 June 2023).
Who this covers
Pro Certs Software Ltd operates www.procertssoftware.com, www.pro-certs.com, and our mobile apps. We use personal data to provide and improve the Service. By using it, you agree to collection and use as described in the full policy.
What we collect
Information you give us when you create an account or fill forms (such as name and email), plus usage and device data (IP address, browser, device identifiers, visit times). Cookies and similar technologies help operate, secure, and measure the Service.
Why we use it
To run the Service, notify you of changes, provide support, improve the product, monitor usage, and detect technical issues — under contract, consent, legitimate interests, or legal obligation as applicable under the GDPR.
Your rights
You can request access, correction, deletion, restriction, objection, and data portability. Requests are free and we aim to respond within one month. Contact support@pro-certs.com.
Legal
Terms of Use
The agreement covering apps, the Management Web Portal, and our websites (last updated 18 August 2023).
Accounts & eligibility
You must be at least 18. You are responsible for account security and all activity under it. We may suspend or delete accounts that breach these terms or damage our reputation. Login credentials must not be shared; simultaneous logins are not permitted.
Billing & refunds
Fees follow the plan in force when charged; auto-renewal bills for the term you selected. App Store and in-app purchases are handled by the store. Digital goods are non-refundable after purchase; a 7-day free trial is offered for the Pro Certs app when available.
Use of the Service
The Service is provided “as is”. You must not use it unlawfully, infringe IP, or interfere with security. Software, design, and branding remain ours; you are responsible for backing up content you create. Disputes are governed by the laws of Buckinghamshire, United Kingdom.
Support
Responsible Disclosure
Found a vulnerability? Here's how to report it.
How to report
Email security@procertssoftware.com with details, steps to reproduce, and any relevant screenshots or logs.
What to expect
Acknowledgement within 2 business days, and a status update as the issue is investigated and resolved.
PGP key
Available on request for sensitive reports.
Support
FAQs
Yes — in transit via TLS, and at rest across our cloud infrastructure and local device storage.
Daily automated backups, plus optional on-demand local backup from within the app.
Yes, at any time via local backup in the app, or by request to our support team.
Photos submitted for AI extraction are processed to generate suggestions and are handled under the same data protection standards as your other certificate data.
Your data remains exportable for a defined period after cancellation before deletion, per our retention policy.
Support
Contact Security Team
Get in touch
For security questionnaires, procurement requests, DPA requests, or compliance enquiries — we'll route it to the right person.
info@pro-certs.com