Book A Demo

Security

ISO 27001:2022

ISO 27001 is the international standard for information security management. Titanium is ISO 27001:2022 certified. To maintain the certification, we operate a dedicated Information Security Management System (ISMS) and undergo independent annual audits to keep our security controls aligned with evolving industry requirements.

Infrastructure & Data

Titanium's primary deployment model is self-hosted, meaning our software is installed directly in your own environment, rather than on our servers. You retain complete ownership of your data, with full visibility and granular control over your security configuration. We support software installations across leading cloud providers, including AWS and Azure, as well as on-premises servers. By deploying within your own environment, you benefit from your chosen provider's physical security, data residency and infrastructure-level protections.

Separately, Titanium's internal operations run on AWS infrastructure, which maintains physically secure facilities with 24/7 on-site security, advanced surveillance and robust environmental controls. Where Titanium hosts the platform on a client's behalf, those deployments also run on AWS.

Security & Privacy

Titanium's security controls, governed by our ISMS, include:

  • Real-Time Scanning: Ongoing vulnerability scanning using industry-standard tools to identify and remediate weaknesses proactively
  • Penetration Testing: Penetration testing is performed across our software solutions. Because the software primarily runs in your own environment, you're also welcome to run your own testing.
  • Data Encryption: All data is encrypted in transit, utilising industry-standard SSL/TLS protocols.
  • Access Management: Multi-Factor Authentication (MFA) and customisable IP restrictions ensure only authorised users can access the platform.
  • Incident Response: A documented incident response plan to identify, contain and resolve security events promptly.
  • Disaster Recovery (DR) & Continuity: Because the software runs in your own environment, you retain full control of your disaster recovery arrangements. Titanium also maintains its own disaster recovery and business continuity plans, which are tested as part of our ISMS.

People Controls

Personnel security is governed by our ISMS:

  • Role-Based Access: Access to systems and data follows the principle of least privilege: only staff with a verified business need are granted access, and only based on what their role requires.
  • Activity Logging: User access and system activity are logged and retained for review.
  • Employee Vetting: All employees must successfully pass background checks and sign confidentiality agreements as a mandatory condition of employment.
  • Security Awareness: Every employee completes regular, mandatory cybersecurity training to stay alert to evolving threats.
  • Continuous Governance: HR and security policies are reviewed annually and updated to align with industry best practices and evolving regulatory requirements.

Software Development

Titanium follows a secure software development lifecycle. Every change is managed through version control, peer reviews, and testing before release. Development, staging and production environments are also fully separated.