Compliance
Root & Branch Cloud maintains a compliance programme designed to meet the needs of security-conscious teams.
Certifications
Section titled “Certifications”We are working toward or maintain the following certifications:
- SOC 2 Type II - controls for security, availability, and confidentiality.
- ISO 27001 - information security management system.
- Cyber Essentials - baseline protection against common cyber threats.
- Cyber Essentials Plus - independent technical assessment of our security controls.
- GDPR - data protection for customers in the European Union.
Compliance reports
Section titled “Compliance reports”Customers on eligible plans can request access to audit reports and compliance documentation through their account manager.
Data residency
Section titled “Data residency”Choose the region where your workloads and data are hosted, including European data centres. Data is stored within the selected region unless you configure cross-region replication.
Subprocessors
Section titled “Subprocessors”We use a limited set of subprocessors for infrastructure, monitoring, and support. A current list is available on request.
Audit requests
Section titled “Audit requests”For compliance questionnaires, audit evidence, or custom security requirements, contact security@rootandbranch.io.