Compliance & accreditationsThe standards we hold
The standards we hold
ourselves to.
BS7858, GDPR and ICO registration. Compliance isn't a marketing tab for us — it's the product.
Compliance & accreditations
The standards we hold ourselves to.
What we screenScreening that fits
Screening that fits
the role.
BS7858, BPSS, event staff, right to work and ID, and standard pre-employment screening are all ready to run, with IDV and references already wired in. Each is built from the same checks, so you screen every role to the standard it needs.
Standard · BSI 2019
Security industryBS7858
The British Standard for screening individuals working where the safety of people, goods or property is paramount.
What’s included
✓
Identity verification (IDV)✓
5-year address history with gap reconciliation✓
5-year employment + education history✓
Two character references + two employment references✓
Credit & AML check (CreditSafe)✓
Self-declaration of unspent convictions✓
Optional four-eyes (two-person) sign-offSecurity & data handlingPersonal data,
Personal data,
handled like it matters.
Passports, credit files, criminal disclosure, references — the most sensitive evidence a candidate has. We treat every byte like it could be ours.
01
UK-only data residency
All evidence stored in eu-west-2 (London). No cross-border transfer without explicit consent.
02
Encryption at rest + in transit
AES-256 at rest, TLS 1.3 in transit, document-level keys rotated every 30 days.
03
Per-check consent + revocation
Every check is opt-in, revocable, and logged in an immutable audit trail.
04
Redaction-aware reporting
Org reports show outcomes, not source documents. Auditors see what they need — nothing more.
05
Retention with purpose
Evidence purged 7 years after certificate issuance, per BS7858 retention guidance.
06
AI that never sees personal details
Documents are read on our side and every name, address and ID number is swapped for a placeholder before Yezda AI sees anything. Files never reach the AI.
07
Penetration tested
External pentest annually. Bug bounty in place via HackerOne (private).
DPA & policies
The paperwork your auditors will ask for.
Ready when you are
Need our compliance pack?
Send a quick note and we'll share our DPA, sub-processor list and security questionnaire.