Built with trust and resilience in mind

At SPACEtag®, we understand that security and compliance are critical — not just for regulated sectors like healthcare and defence, but for any organisation that values data integrity, privacy, and operational assurance. That’s why our platform has been designed from the ground up to align with the UK Government’s 14 Cloud Security Principles, as published by the National Cyber Security Centre (NCSC).

Whether you’re using our shared cloud environment or a private, enterprise-grade deployment, you can be confident your data is handled responsibly and securely.

Our Commitment: Aligned with NCSC’s 14 Cloud Security Principles

We’ve taken active steps to meet the standards laid out in the NCSC’s guidance. Here’s how SPACEtag® Cloud aligns:

1. Data in Transit Protection
   All data transferred across our platform is encrypted using HTTPS with TLS 1.2 or higher.
2. Asset Protection and Resilience
   We host in trusted data centres with replication and backup strategies to ensure resilience and disaster recovery.
3. Separation Between Consumers
   Strict data isolation is enforced between tenants through logical separation and access controls.
4. Governance Framework
   Our platform is developed and operated under a clearly defined governance model with regular reviews, aligned with UK data protection laws.
5. Operational Security
   Our team follows secure operational processes for patching, monitoring, and incident response. Logs are reviewed and access is tightly controlled.
6. Personnel Security
   Access to systems is granted on a least-privilege basis.
7. Secure Development
   We follow secure coding standards with peer review, static analysis, and integrated security testing in our CI/CD workflows.
8. Supply Chain Security
   We vet all third-party components and track dependencies for known vulnerabilities using automated tooling.
9. Secure User Management
   Role-based access control (RBAC) and optional multi-factor authentication (MFA) are available for all administrative access.
10. Identity and Authentication
    We use token-based authentication (JWT) and support federated identity models where required.
11. External Interface Protection
    Only essential APIs and services are publicly exposed. Rate limiting and monitoring help prevent abuse.
12. Secure Service Administration
    Administrative interfaces are segregated and secured, with VPN access available for sensitive deployments.
13. Audit Information Provision
    Detailed logs and audit trails are available and can be exported or integrated with your SIEM tooling.
14. Secure Use of the Service
    We provide clear guidance and best practices for customers to configure and use SPACEtag Cloud securely.

Flexible Deployment Options

We offer three hosting models to meet a wide range of operational needs:

• Shared Cloud
  Cost-effective, multi-tenant environment suitable for general business use.
• Dedicated Enterprise Hosting
  Fully isolated environments with enhanced security features, private API endpoints, and VPN access where required.
• Hybrid & Edge Deployments
  On-premises or edge-hosted deployments ideal for offline or sensitive environments, with support for secure data sync and private network operation.

Compliance Readiness

SPACEtag® Cloud is aligned with:

• UK GDPR and Data Protection Act 2018
• NCSC Cloud Security Guidance
• Cyber Essentials (with roadmap to Plus certification)
• Government data handling expectations

We are actively working with organisations in regulated industries and can tailor our platform to meet specific assurance or accreditation requirements.

---

Questions or Sector-Specific Requirements?

We’re happy to work with your team or security advisors to demonstrate compliance, assist with risk assessments, and provide deployment options that meet your operational context.

Contact us for further details or to arrange a technical deep dive.