top of page
Data security - Data Protection for your data.

DATA SECURITY

We are engaged in providing trusted outsourcing accounting services at incredible prices to solve your issues on the growth of your business. When you outsource your business services and get the work done from a faraway place, it should be in the right hands and there must be enough protection to safeguard your data. Naturally you have to be concerned about the privacy of your data.

The protection of your data is the single most important factor in our business. We are aware of your concerns and the data security regulations. That is why we take every possible care to guarantee absolute confidentiality of your data and your 100% peace of mind.

First of all, we are a UK limited company with offices in London and we adhere to data protection and confidentiality regulations in the UK. Let us look at some of the security measures we use.

Data security of our office - GDPR data protection regulation

Office Security

 

  • Full-time security guards at our offices

  • Disaster recovery plans to ensure uninterrupted service for all our offices

  • Bio-metric fingerprint reader system to restrict access

  • Disaster recovery procedures in all our offices, backing up all your data to secure servers in USA & Europe

  • CCTV overlooking all computer stations

Data Protection for systems & servers - GDPR

Systems & Servers Security

  • Online file transfer system with 256-bit encryption.

  • No printers, USB pen drives and CD/DVDs in the office

  • All our systems are access restricted by multiple levels of password protection

  • Our high security servers are managed from data centers in the USA & Europe

  • Activity monitoring software is installed in all our computers

Data security for staff employee gdpr Uk data protection act

Staff Security

  • Online file transfer system with 256-bit encryption.

  • Independent security clearance for every staff employee.

  • NDA (Non-disclosure agreement) signed by every staff member

  • Screening before employment

  • Extensive data confidentially training

As you can see, we have comprehensive data security measures to ensure the protection of your data. Periodically we carry out complete security audits to ensure our standards are continually maintained. When you decide to outsource your bookkeeping to us, you can be assured that you will get the highest possible security for your data.

GDPR Compliance

GDPR Compliance (EU General Data Protection Regulation)

 GDPR compliance

On 25 May 2018, the GDPR (General Data Protection Regulation) came into force. This new data protection regulation affects all businesses that operate in Europe and handle personal data, in any sector and regardless of their country of origin. Companies will have to be transparent about how they collect, process, and keep this data.

GDPR brings data protection law into line with technological developments which have impacted on the way organisations and consumers interact.

 

Amber Business Solutions carefully considers the protection of all personal data that flows into and outside our organisation and we have substantially invested on all areas in preparing for the implementation of the new data protection regime. We respect the need for us to process our customer’s data and keep it secure in accordance with the GDPR rules. We understand our role as both data controller and data processor depending on the way personal data is made available to us.

Data protection act and GDPR compliance

Many of the GDPR’s main concepts and principles are much the same as those in the UK data protection act to which Amber strictly adheres to. Our approach to data protection and compliance will remain valid under the new GDPR regulations.

 

The GDPR builds on the existing data protection regime by introducing new aspects such as the accountability principle, increased rights for data subjects, direct obligations on data processors and new rules around data breach notifications.

 

Although the key principles of data protection still hold true to the previous directive, some changes have been made to the regulatory policies. The key points and differentiating factors of the GDPR directive are

  • Secure storage and handling of data

  • Right to be informed

  • Right to delete information

  • Limit the purpose of your information

  • Consent

Secure data storage and handling

We have taken extensive steps to protect and handle your information. The following are the various points that we have undertaken to ensure the security of your data.

Physical and Environmental Controls

  • 24/7 security guards at our building

  • Finger print scanner access doors to prevent entry of un-authorized personnel

  • Computing equipment in access-controlled areas

  • Humidity and temperature control with alarm placed in server rooms

  • Diesel generators power back up with on-site diesel fuel storage

Operational Security Controls

  • High-end firewall gateway which provides security, web control, and application control.

  • Symantec end point protection is used to prevent, detect, and eradicate malware along with device control.

  • Connected to the Internet from multiple Internet Service Providers served from multiple telecommunication provider Points of Presence.

  • Information Security staff monitors notification from various internal systems.

  • Active Directory Authentication is used for User access control and network access.

  • Restricted Internet access

  • Our high security servers are managed from USA & Europe data centers

  • No removable drives (CD/DVD) in the operations floor

  • Activity monitoring software is installed in all our computers

  • All our systems are access restricted by multiple levels of password protection

  • No printers, USB based pen devices and DVD/CD drives on the work floor

  • Computer networks are safe guarded by many levels of software

  • Your information is used only to process the tasks that you have assigned to our staff

Human Resources

  • NDA (Non-disclosure agreement) signed by every staff member

  • Independent screening and background checks before employment

  • Extensive data confidentiality training as per ISO 27001 standards

  • No mobile phones are allowed inside offices and kept in lockers outside

Right to be informed

  • The information that you provide for processing and completing your work tasks will only be used by Integra and its operations branch in India

  • This information will be used by our staff who will perform the project tasks assigned and agreed upon by both parties

  • Your information will not be shared with any third-party companies

Right to delete information

  • You can also choose to delete your process/project data whenever during the period you are using our services.

  • This information will only be stored as long as you are a client of ours and will be deleted when you stop using our services.

Limiting the purpose of your information

  • Your project/task information will only be used to perform the tasks that you have agreed to send to us and have signed an agreement with us on.

Consent

  • Our service agreement clearly states in which of our offices your projects tasks will be processed, and data will be handled. You are given the option to agree to this or not.

  • In addition to the standard service agreement, we will also provide you with a detailed data processing agreement compliant to GDPR

  • You can withdraw the consent to any of this agreement, whenever you chose to

Contact us  for uk accountants
Contact Us | Amber Business Solution

Need more details ?

WE HELP IN YOUR ACHIEVEMENTS

bottom of page