Security overview
Written by PQC Consultancy in their own words. We do not translate it.
PQC Consultancy last updated this page on 2026-09-02
Security and data protection at PQC Consultancy
A demonstration trust centre on the Managed tier, showing what a buyer sees when a supplier publishes their security evidence in one place instead of answering questionnaires.
On Managed, coverage is independently Assessed: we read the published documents against the standard and name the areas they do not cover, rather than repeating the supplier's own mapping. The page is kept current, renewals are tracked, and a mark is withdrawn if anything lapses.
Certifications
ISO/IEC 27001Certificate valid to 01 Sep 2027
Cyber Essentials PlusCertificate valid to 01 Feb 2027
Coverage
5 of 8 areas coveredAssessed by VitroVault. We read the documents PQC Consultancy publishes here against each area of this standard, and name the one that covers it. Where an area has nothing beside it, we found no published document covering it.
What this covers. What those documents say, rather than how a control works in practice; it is not an audit. PQC Consultancy may also hold certifications, or share more on request or under their agreement.
Documents
Subprocessors
| Name | Purpose | Location | Category | Their privacy notice |
|---|---|---|---|---|
| Amazon Web Services | Hosting and storage of customer data | Ireland (eu-west-1) | ||
| Transactional email provider | Delivery of service notifications | Ireland | ||
| Error monitoring provider | Diagnostic telemetry, with personal data scrubbed at source | European Economic Area | ||
| Payment processor | Billing only, no customer content | European Economic Area |