Messaging governance.

Policies, compliance & security

Faretext embeds best practice into how we build, manage, and deliver services. Aligned with ISO 27001, ISO 9001, and Cyber Essentials Plus.

ISO 27001 aligned ISO 9001 aligned Cyber Essentials Plus ICO registered

Overview

Governance built on international best practice.

From day one, Faretext has operated with a clear commitment to responsible business practices. Our governance framework is built around internationally recognised standards, ensuring that information security, quality assurance, and regulatory compliance are embedded into everything we do.

Our policies cover data privacy, information security, quality management, environmental sustainability, and ethical business conduct. Every policy is documented, reviewed annually, and supported by staff training programmes that reinforce our commitment to continuous improvement.

Certifications

Standards we align with.

ISO 27001

Information Security aligned with ISO 27001 principles. Role-based access, MFA, encryption, and tested incident response.

ISO 9001

Quality Management aligned with ISO 9001. Continuous service improvement driven by KPIs, audits, and customer feedback.

Cyber Essentials Plus

Cybersecurity practices aligned to Cyber Essentials Plus. Annual third-party penetration testing and vulnerability scanning.

ESG / Sustainability

Environmental efficiency, ethical governance, and fair employment policies in place.

Data Privacy

GDPR compliant. ICO registered.

Faretext is registered with the Information Commissioner's Office (ICO) and fully compliant with GDPR and the Data Protection Act 2018. Data privacy is embedded into our platform design, our internal processes, and our contractual commitments.

Registration number ZA054854 ICO registered
Privacy, Cookie, Anti-Spam, and DPA in Terms & Conditions Published policies
All personnel trained on GDPR, InfoSec, and data privacy Staff training
Role-based access, encryption in transit and at rest, retention schedules Access & encryption
Documented detection, reporting, and notification procedures Breach management

Information Security

Protecting your data at every level.

Access Control

Role-based permissions, MFA for critical systems, and least-privilege access policies across all infrastructure.

System Security

Regular patching, malware protection, firewalls, and intrusion detection systems across all environments.

Monitoring & Response

24/7 monitoring, anomaly detection, and documented incident escalation procedures.

Independent testing conducted annually Penetration testing
Security-vetted providers only Cloud providers
Multi-site redundancy with tested recovery procedures Disaster recovery

Quality

Continuous improvement.

Our quality management practices are aligned with ISO 9001 principles. We measure, review, and improve every aspect of our service delivery, from onboarding and support to platform performance and compliance.

Documented processes

Documented onboarding, support, and escalation procedures ensuring consistency across every customer interaction.

Real-time reporting

Real-time reporting, KPIs, and dashboards that provide visibility into platform performance and service quality.

Customer feedback

Customer feedback loops and corrective action processes that drive meaningful service improvements.

Internal audits

Regular internal audits for compliance and efficiency, ensuring governance controls remain effective.

ESG

Responsible business practices.

Environmental

Cloud-first infrastructure, paperless operations, remote-first culture, and sustainable supplier selection to minimise our environmental footprint.

Social

Fair employment, equal opportunities, accessibility, and employee well-being programmes that support a healthy and inclusive workplace.

Governance

Transparent and ethical practices, documented policies, and supplier ESG vetting to ensure accountability throughout our operations.

Policy Management

Documented, tested & reviewed.

Governance policies reviewed annually, or sooner if regulations change Annual review
Training at induction, refreshed annually Staff training
Escalation procedures documented and tested Incident response
Internal reviews ensure controls remain effective Risk reviews

Questions about our governance?

Our team is happy to discuss compliance, security, and data protection.

UK-based team. 01142 945 993. hello@faretext.co.uk

We value your privacy

We use cookies to enhance your browsing experience, analyse site traffic, and serve personalised content. You can choose which categories of cookies you allow below. cookies | privacy | terms | anti-spam