Security & Trust

Security is foundational to everything Foods Connected builds

At Foods Connected, protecting customer data and ensuring the reliability of the platform isn't a feature, it's the foundation on which the entire service is built.
Approach

A multi-layered approach to security

Security thinking is applied at every layer of the platform, from the infrastructure it runs on, to how code is written and tested, to how incidents are handled.

  • Cloud Infrastructure icon

    Cloud Infrastructure

    The platform runs entirely on Microsoft Azure, with geo-redundant architecture across multiple European data centres for high availability and resilience.

  • Access Control icon

    Access Control

    All accounts are secured with Multi-Factor Authentication and conditional access policies, managed through enterprise-grade identity services.

  • Secure Development icon

    Secure Development

    Security is embedded throughout the development process, with automated vulnerability scanning and dedicated penetration testing by accredited third parties.

  • Data Resilience icon

    Data Resilience

    Multiple backup strategies, including point-in-time restore and long-term retention, protect customer data, with automated recovery testing to ensure integrity.

  • Change Management icon

    Change Management

    All production changes undergo formal review and approval, with strict access controls limiting who can make changes to the live environment.

  • Compliance icon

    Compliance

    Foods Connected maintains ISO 27001:2022 and Farm Data Safe certifications, holding itself to recognised global standards for information security.

Built on Azure, designed for resilience

Hosted on Microsoft Azure, one of the world's leading enterprise cloud providers, and backed by its extensive compliance certifications and built-in security capabilities.

  • Resilient hosting icon

    Resilient hosting

    Azure's European data centres, with geo-replication providing failover should any regional disruption occur.

  • Controlled change icon

    Controlled change

    Development and test are fully isolated from production, and infrastructure provisioned as code keeps deployments consistent, repeatable and auditable.

  • Protected by default icon

    Protected by default

    Automated security monitoring and threat detection, with enterprise identity management and MFA.

Customer data, carefully protected. So is the risk.

Multiple layers of protection keep customer data secure, available and recoverable, including a copy that sits beyond any single cloud provider.

1

Azure-managed backups

Automated backups with point-in-time database restore and daily incremental backups.

2

Long-term retention

Weekly, monthly and annual copies kept for the long term.

3

Encrypted off-cloud copies

External copies of critical data on encrypted storage, adding redundancy beyond a single cloud provider.

Automated restore testingRecovery procedures are tested regularly, so backups are proven complete and restorable.
Development & testing

Security built in, not bolted on

Security practices are embedded throughout the development lifecycle, from the first line of code to production deployment.

  • Static Analysis icon

    Static Analysis

    All code commits are automatically scanned for security vulnerabilities before they can progress, catching issues as early as possible.

  • Dynamic Testing icon

    Dynamic Testing

    Before any release reaches production, dynamic testing in the staging environment validates that no new vulnerabilities are introduced.

  • Penetration Testing icon

    Penetration Testing

    The platform is subject to annual penetration testing by independent third-party providers, with findings remediated according to severity and used to inform continuous improvement.

Independently verified, continuously maintained

The certifications reflect a genuine, ongoing commitment to information security, not a one-time exercise.

British Assessment Bureau ISO 27001 Information Security Management certification badge, UKAS accredited, certificate number 8289
Certified

ISO 27001:2022

Foods Connected is certified to the latest version of the international standard for information security management, demonstrating that its controls meet globally recognised best practices for protecting data.

Verify certificate →
Farm Data Safe certification logo
Certified

Farm Data Safe

Foods Connected holds Farm Data Safe certification, underscoring its commitment to responsible and secure handling of data within the food and agriculture industry.

Learn more →

Questions about security?

Talk to the team about how Foods Connected protects customer data.