Visualise Info Trust Centre

Helios uses a Kubernetes-based architecture that supports managed and customer-controlled deployment models.

• UK-hosted managed infrastructureManaged Helios deployments primarily use Civo infrastructure hosted in the UK. The specific hosting arrangement is confirmed for each deployment.
• Customer isolationClient infrastructure is siloed. Managed clients are not hosted together on the same server or Kubernetes cluster.
• Deployment portabilityKubernetes supports consistent deployment across managed infrastructure and suitable customer-controlled environments.
• On-premises optionOn-premises deployment is achievable where customer or organisational requirements call for it.
• Selected network servicesCloudflare is used for selected networking and security infrastructure, including tunnels.

UK-hosted managed infrastructure does not constitute a blanket data residency guarantee. Location and processing requirements are agreed for the relevant deployment.

Authentication and application authorisation are separate, connected responsibilities within Helios.

Application assurance is supported through transport security, code analysis and controlled release practices.

• HTTPSHelios is accessed over HTTPS.
• Code analysisAutomated code analysis is performed during pull requests before changes are published
• Release managementHelios uses defined release processes and semantic versioning.

Recovery arrangements are shaped around the infrastructure and operating model selected for each customer.

Visualise Info can act as controller or processor depending on the processing context and the relationship with the customer.

• Contractual rolesA Data Processing Agreement is available for applicable customer-controller and Visualise Info processor relationships. It is provided for legal review during contracting rather than published here.
• RetentionCustomer data-retention requirements can be client-specific and are handled under the applicable agreement.
• End of servicePersonal data is returned or deleted at the end of processing or service in accordance with the applicable agreement.

Procurement and security review can go beyond the public overview where a customer needs to assess Helios against its own requirements.

• Questionnaires and evidence reviewCustomer security questionnaires and evidence reviews are supported as part of procurement.
• Assurance document requestsProcurement and security teams can request certification evidence, applicable privacy and legal documents, DPA review, infrastructure and deployment information, and responses to security questionnaires. Materials are provided as appropriate to the review; access may be limited to a controlled review and appropriate confidentiality terms.
• Deployment-specific answersInfrastructure, backup, recovery, availability and data-handling requirements can be reviewed against the proposed deployment and contract.
• Technical testingActive vulnerability scanning, penetration testing and other technical testing require prior written agreement and an agreed scope.