Company & compliance
The things a buyer’s procurement or IT team usually asks for, on one page you can forward.
Last reviewed: 19 September 2026
We are a small, long-established supplier, and most of what follows can be checked independently rather than taken on trust. Where we do not hold something, it says so rather than being left vague.
1. The Company
- Trading name: eplatforms
- Registered in: England and Wales
- Company number: 03954521 — view at Companies House
- VAT number: GB 768 519677
- Trading since: 2000 (26 complete years)
- Business address: Basepoint Business Centre, Shoreham-by-Sea, BN43 5EG, United Kingdom
- Contact: info@eplatforms.com · 0303 666 5485
The registered office of record is the one filed at Companies House; the link above is the authoritative source and will always be more current than this page.
2. Data Protection
- ICO registration: Z871919X — view on the ICO register
- Privacy notice: Privacy Policy
- Cookies: Cookie Policy
- Where data is held: in the United Kingdom. See infrastructure and sub-processors below.
On client systems we normally act as a processor and the client as controller; for our own website and business records we are the controller. Which applies, and on what terms, is set out in the agreement for each engagement rather than assumed here.
3. Security
What a buyer generally needs to know is what is protected and who is accountable, rather than how the locks are built. We describe our controls in detail under NDA or in a completed security questionnaire, not on a public page.
- Reporting a vulnerability: how to report a security issue, including what we will do and how quickly we will acknowledge it.
- In transit: every site we run is served over HTTPS, with certificates renewed automatically.
- Separation: client systems and their data are kept separate from one another.
- Access: administrative access is limited to named individuals. We do not use shared accounts.
- Monitoring: availability and automated attack traffic are monitored continuously.
4. Infrastructure and Sub-processors
Named because data protection law expects a processor to disclose who else handles the data, and because procurement will ask.
- Amazon Web Services — hosting, databases, storage and content delivery. UK region.
- Cloudflare — DNS, content delivery and edge protection.
Data residency: client websites, databases and their backups are held in the United Kingdom.
We do not subcontract development or support. The people who design a system are the people who build it and look after it afterwards.
5. Continuity and Backups
- Databases are backed up automatically every day, with point-in-time recovery.
- Server images are retained alongside them.
- Backups are held in the same United Kingdom region as the data they protect.
Longer retention, a documented recovery time objective, or regular tested restores can be arranged as part of a support agreement. We would rather say that than imply a level of service nobody has agreed to pay for.
6. Accessibility
Our approach, the standard we work to, how we test and the limitations we know about are set out in our accessibility statement. We build to WCAG 2.2 AA as a working standard and will say where a particular site falls short of it.
7. Support Arrangements
Support is provided by the same team that builds the work, reached at info@eplatforms.com or 0303 666 5485 during UK business hours. Response times, cover outside those hours and escalation are set by the support agreement for each client; we do not publish a single service level that would not be true for everybody.
8. What We Do Not Currently Hold
Listed because a due-diligence questionnaire will ask, and a straight answer is faster for both sides than a vague one.
- Cyber Essentials: not currently certified. This page will be updated if and when that changes.
- ISO 27001: not certified.
- Public-sector frameworks: we are not presently on G-Cloud or any other procurement framework.
- Insurance: certificates of professional indemnity and public liability cover are available on request rather than published here.
9. Asking Us Something Else
If your procurement process needs a completed questionnaire, a signed data processing agreement, evidence of insurance or a reference from a client in your sector, email info@eplatforms.com and say what you need it for. We would rather answer the actual question than send a brochure.