How CRIS protects your data.

๐Ÿ”

Multi-factor authentication

MFA is supported across accounts, so a password alone is never enough to reach a child's records.

๐Ÿงพ

Audit by default

Actions are logged and attributable, giving a reliable trail of who did what, and when.

๐Ÿ›ก๏ธ

Permission-checked access

Role-based, child-linked permissions govern every record and file โ€” including document delivery.

๐Ÿ‡ฌ๐Ÿ‡ง

UK-based hosting

Hosted on Amazon Web Services in the UK region, on managed, monitored infrastructure.

๐Ÿ”’

Encryption

Data is encrypted in transit, with encryption applied to data at rest on our cloud infrastructure.

๐Ÿ’พ

Managed backups

Automated backups on managed database infrastructure support continuity of records.

Hosted on secure, certified UK infrastructure.

  • Hosted on ISO 27001-certified AWS infrastructure (UK region)
  • Cyber Essentials certified
  • UK GDPR-aligned data handling and retention
  • Clear controller / processor roles (see below)
Cyber Essentials certified

You are the data controller. CRIS is your processor.

The records about children in your care belong to your organisation. CRIS Care Technologies Ltd processes that data on your behalf, under your instructions and applicable UK law โ€” never for our own purposes.

What this means for you

Your organisation decides how records are used and retained. We provide the secure platform, the audit trail and the tools โ€” you remain in control of the data.

Data subject requests

Account deletion and data requests are supported through a clear process. See our Privacy Policy and account & data deletion page.

Questions about security?

Book a demo and we'll walk through exactly how CRIS protects your home's data โ€” and answer anything your DPO or manager needs to know.

Book a demo