Skip to content
EntireFM
Privacy & Data ProtectionPrivacy & Data Protection

Information Security & Trust Overview

High-level security overview covering database encryption, role-based access controls, tenant isolation, automated backups, and vulnerability management.

Effective: 2026-01-01
Document Version: 2026.1

Summary at a Glance

  • Multi-tenant database isolation preventing cross-organization data leakage.
  • Data encrypted in transit (TLS 1.3) and at rest (AES-256).
  • Cryptographically signed HMAC authentication sessions with live revocation.
  • Regular automated backups and business continuity redundancy.

1. Information Security Architecture

EntireFM protects client, contractor, and operational data through a defense-in-depth security model encompassing physical, network, database, and application controls.

2. Encryption & Data Storage

All communications are encrypted in transit using modern TLS 1.3 encryption. Data stored in our database and document vault is encrypted at rest using industry-standard AES-256 encryption within UK datacenters (AWS London).

3. Identity, Access Control & Tenant Isolation

User access is governed by strict Role-Based Access Control (RBAC) and object-level membership scoping. Cross-tenant access is blocked at the database query boundary. Sessions are cryptographically signed with HMAC SHA-256 tokens.

4. Backup Redundancy & Business Continuity

Databases are backed up automatically with point-in-time recovery capabilities. Disaster recovery protocols ensure high availability and business continuity for critical FM dispatch and compliance operations.

Authorised by: EntireFM Legal, Risk & Compliance Committee

Operating Company: EntireFM (trading name of Alkota Group Limited). Registered in England and Wales (Company No. 13535215).

This policy is formally reviewed annually and immediately following any statutory or operational changes.

Official Legal & Privacy Channel

Data Protection & Legal Governance Inquiries

For statutory requests, data protection questions, contract notices, or governance inquiries, please contact our designated compliance team.

Submit Electronic Complaint

Email Contact

privacy@entirefm.com

Direct response within statutory timelines

Compliance Helpline

020 4586 5422

Monday–Friday, 08:30–17:30 UK

Supervisory Escalation

ICO (Information Commissioner)

UK Lead Supervisory Authority

Related Governance Policies

View Legal Centre

Privacy Notice

Comprehensive UK GDPR, DPA 2018, and PECR privacy notice explaining how EntireFM collects, uses, protects, and respects personal information across all FM services, B2B marketing, and digital platforms.

Data Protection & Governance Framework

Internal governance standards, accountability measures, data classification, breach management protocols, and technical controls enforced across EntireFM operations.

Acceptable Use Policy

Security rules, credential standards, and behavioral requirements for clients, contractors, and engineers accessing the EntireFM CAFM portals and APIs.

Authorized Subprocessors Register

Transparent public register of third-party cloud infrastructure, database, communication, and analytics providers authorised to process data across EntireFM systems.