Security
Security and data protection
Supported accommodation records are about real young people. This page summarises how TIFA Connect handles security, access and your data. The detail comes in due diligence.
Controls
Data residency
UK and EU-West infrastructure, with UK residency commitments available in writing.
Access control
Permissions by organisation, service, property and role, with authenticator MFA required for privileged roles that sign in by email.
Audit trail
Changes to records, approvals and access-sensitive activity are time-stamped and attributed to a person.
Encryption
Encryption in transit and at rest, with managed secrets and controlled service access.
Resilience
Documented backup, recovery, incident response and continuity arrangements, available in due diligence.
Data ownership
Your data stays yours, with defined export formats and an exit process.
Supplier assurance
Data processing terms, subprocessor information and security answers provided before you commit.
UK accountability
TIFA Connect is registered with the ICO under registration ZC131131.
AI
What AI does and does not do
AI in TIFA Connect does two things: it sorts incoming local authority email by type, and it pulls the details out of referrals. Both run on text with personal details removed, and the AI provider keeps none of it. It does not accept placements, make safeguarding decisions or send anything to a local authority. Authorised people review, decide and send.
With Michael Border, founder
Book a demo
Bring your security and data protection questions to the demo. Architecture, subprocessors and contract terms are covered in due diligence.