The answers before the questionnaire

Procurement and security teams ask the same good questions of every supplier. This page sets out how we work, what we are certified against, and who to contact. Policies and certificates are available on request.

ISO 27001:2022ISO 9001:2015UK GDPR and EU GDPRCompany no. 11848956

Controls

How we protect your platform and your data

ISO 27001:2022Certified information security management system covering our consulting, managed services and product operations. Certificate available on request.

ISO 9001:2015Certified quality management system for how we scope, deliver, test and hand over engagements.

Access controlLeast-privilege access to customer instances, named accounts only, multi-factor authentication enforced, access reviewed quarterly and removed at engagement end.

Customer dataWe work in your ServiceNow instance. Customer data is not copied to our systems unless a documented, agreed need exists, and then only under a data processing agreement.

Devices and networkManaged, encrypted laptops with endpoint protection, patched within policy, with secure remote access and no shared workstations.

PeopleBackground checks on hire, security awareness training on induction and annually, confidentiality in every contract. UK-based or cleared staff available where a contract requires it.

Incident responseA documented process with named owners. Customers notified without undue delay of any incident affecting their data, and within contractual timescales.

Business continuityTested continuity plans for our delivery centres, with work able to move between the UK and India teams.

SuppliersSub-processors assessed before use and listed on request. Our products run on infrastructure in the UK and the US, chosen per customer for data residency.

Secure developmentScoped applications, code review, automated testing and source control on every build. Our own products follow the same lifecycle with vulnerability monitoring.

Documents

Available on request

Email privacy@intelibliss.com or ask your Intelibliss contact. Most are shared within two working days, policies under NDA.

CertificatesISO 27001:2022 and ISO 9001:2015 certificates and scope statements.

PoliciesInformation security, acceptable use, access control, incident management, business continuity, data protection, secure development.

LegalData processing agreement, sub-processor list, standard terms of business, insurance certificates.

StatementsModern slavery statement, accessibility statement, privacy policy, cookie policy.

FAQ

What procurement and security teams ask

Can we see your ISO certificates and policies?

Yes. Email privacy@intelibliss.com or ask your Intelibliss contact. Certificates are shared on request, and policies under NDA.

Will you complete our security questionnaire?

Yes. We respond to supplier assurance questionnaires regularly for banks, public-sector bodies and large outsourcers. Send it to your Intelibliss contact with the deadline.

Where is customer data processed?

In your ServiceNow instance. Where our products are used, hosting is in the UK or the US depending on the customer, and we agree residency before go-live. Our delivery centre in India works through secured access to your instance, not copies of your data.

Do you hold Cyber Essentials?

Our ISO 27001:2022 certification covers and exceeds the Cyber Essentials controls. Where a UK public-sector contract specifically requires Cyber Essentials Plus, we can provide evidence of equivalence or obtain the certification for the contract.

Who is your data protection contact?

Email privacy@intelibliss.com. Our privacy policy sets out how we handle personal data, and our registered office is Suite 42 Beaufort Court, Admirals Way, London E14 9XL.

Supplier assurance

Send us your questionnaire

We will complete it and attach the evidence. Tell us the deadline.