Beacon's future is Secure

We're committed to providing the safest home possible for our customers’ data. That's why we maintain ISO 27001:2022 certification, the most highly-regarded global standard for data security. Our auditors are UKAS accredited.

Cyber Essentials Plus is the highest level of certification in the UK government's Cyber Essentials scheme, and includes a technical audit of the Beacon team’s endpoint devices.

Beacon is hosted on Amazon's AWS and Google's infrastructure. The same systems power organisations across the globe, from Netflix to NASA.

Unlike other providers, our infrastructure is based entirely in the UK. We don't store your data abroad.

Our automated systems constantly monitor user activity, blocking any access that looks suspicious.

Your data is held behind a closed network, on servers based in the UK, that are not accessible to the public.

Provide extra login security by requiring confirmatory authentication using your mobile phone.

All communications between your browser and Beacon's website and mobile apps are encrypted via HTTPS.

All sensitive data including contact information, payment records, passwords and API keys are encrypted at rest.

Set fine-grained roles and permissions so your users only gain access to the data and features they need to carry out their work.

Often called 'SSO', sign into your Beacon account using Google or Microsoft. Safe, secure, simple!

We put our systems to the test every six months, hiring independent security experts to try and find potential vulnerabilities so we can patch them up.

We deploy a modern Continuous Threat Exposure Management (CTEM) system, always-on agentic testing that continuously finds and validates any exploitable vulnerabilities.

Every line of code that we deploy is double-checked by a different engineer to the one who wrote it, and an AI-based system does a final security check before going live.  All build artefacts are scanned for vulnerabilities before deployment.

We have comprehensive cyber security insurance provided by industry leaders Hiscox.  If something goes wrong, there is a team of cyber forensic experts immediately on hand to provide support, and review any remedial work.

Unlike free AI tools, like ChatGPT, Beacon AI can't access your data, and doesn't use it to train public AI models. Your data never leaves the UK, so you're always on the right side of GDPR. Find out more here.

Your entire CRM is automatically backed up every day, with records stored for 30 days.

Beacon's card processing uses Stripe, which is secure and PCI compliant. Card details are never stored on our servers.

Securely store contact & marketing preferences, uploaded consent forms and other compliance information.

In Beacon, you can delete anyone's data permanently, along with all of their associated information and file attachments.

All of your data is stored securely in the UK, hosted by Amazon Web Services.

We keep a complete history of all changes made to a record, and who made the change, so you get the full picture on how Beacon is being used.

You can filter and segment data in the way you like. Build targeted lists based on consent date, marketing preferences, and more.

You can easily download anyone's data from Beacon and send straight to the requester.