Data & Security
Your compliance records are business-critical. Here are the independent registrations and certifications that back up how we protect them.
Registered with the ICO
LogBooks Hub is operated by Reflowai Limited, which is registered as a data controller with the UK Information Commissioner's Office (ICO) under registration number ZC176661. The ICO is the UK's independent regulator for data protection, and registration is a legal requirement for organisations that process personal data.
What this means for you:
Lawful basis for processing
We only process your personal data where we have a lawful basis to do so, as required by UK data protection law.
UK GDPR compliance
Registration reflects our obligations under the UK GDPR and Data Protection Act 2018 — including transparency, security, and respecting your rights over your data.
Right to complain to the ICO
If you are ever unhappy with how we handle your data, you have the right to raise it directly with the ICO, the UK's independent data protection regulator. Make a complaint to the ICO.
Cyber Essentials Certified
Cyber Essentials is a UK government-backed certification scheme, operated by the National Cyber Security Centre (NCSC), that defends against the most common cyber attacks. To hold the certification, an organisation must implement five technical controls and have them assessed annually.
For you, our certification means the systems that hold your logbook data are independently verified against a recognised national security baseline — not just our own word for it.
Firewalls
Boundary firewalls and internet gateways keep untrusted traffic away from our systems.
Secure Configuration
Systems are configured securely, with unnecessary services and default credentials removed.
Access Control
Accounts and admin privileges are restricted to only the people who need them.
Malware Protection
Devices and servers are protected against viruses and other malicious software.
Patch Management
Software is kept up to date so known vulnerabilities are fixed promptly.
Our live certificate mark — click it to verify our certification on the official registry.
Working Towards ISO 27001
ISO/IEC 27001 is the leading international standard for information security management systems (ISMS). It goes beyond individual technical controls: it requires an organisation to run a continuous, risk-based security programme covering people, processes, and technology — and to have that programme independently audited.
We are currently working towards ISO 27001 certification. We do not yet hold it, and we won't claim it until an independent audit says we've earned it. This page will be updated as soon as certification is achieved.