Security
Your systems, your data, your rules.
Every system we build is compliant from day one: GDPR in the UK, HIPAA in the US. You decide where it is hosted, who can use it and what needs a person's approval, and everything it does is on record.
Compliance
Built to the rules your business answers to.
GDPR for clients in the UK, HIPAA for clients in the US. SCA Systems is registered with the ICO, and anyone can check the registration.
GDPR
Compliant
The UK and EU law on personal data.
HIPAA
Compliant
The US law on health information.
ICO
Registered
The UK's data protection regulator. Check us on the public register.
Role-based access
Built in
People and AI agents see only what their job needs.
Full audit trail
Built in
Every action is named, timed and kept on record.
Built in
What every system comes with.
Not extras, and not a higher plan. These are in every system we build, from the first version.
- 01
Hosted where you choose
On your own cloud or servers, or hosted by us. It is your decision, and you can move it later.
- 02
You own the code, the data and the keys
Everything we build is yours. You hold the accounts and can remove our access at any time.
- 03
Access by role
Every person and every AI agent sees only what its job needs, and nothing can change more than it was given.
- 04
A person approves what matters
Payments, emails to clients, changes to records: you choose which actions wait for someone on your team.
- 05
Everything on record
Every action is logged with who or what did it, when, and what changed. You can review it at any time.
- 06
Changes you can undo
Every update is versioned. Nothing changes without a record, and any release can be rolled back.
AI agents
How an AI agent stays inside the rules.
An agent can answer enquiries, update records and prepare documents for your team. This is what happens every time it tries to act.
- 01
The agent asks
It wants to do something: reply to an enquiry, update a record, raise an invoice.
- 02
Its role is checked
Its permissions decide whether it is allowed to. If it is not, it stops there.
- 03
A person approves
If you marked the action as one that matters, it waits for someone on your team.
- 04
It acts, on record
The action goes through and is logged: what happened, when, and who approved it.
Questions
What businesses ask us first.
- Where is our data kept?
- Where you choose: on your own cloud or servers, or hosted by us. It stays in the system we build for you, and we do not use it for anything else.
- Can an AI agent act on its own?
- Only within the role you give it. You choose which actions need a person to approve them first, and every action, approved or not, is logged.
- Who can see what?
- Access is set by role. Each person, and each AI agent, sees only the records and tools their job needs, and you can change that at any time.
- Are you GDPR and HIPAA compliant?
- Yes. We build to UK GDPR for clients in the UK and to HIPAA for clients in the US. SCA Systems is registered with the ICO, the UK's data protection regulator, and the registration is on the public register.
- What happens if we stop working with you?
- You keep everything. The code, the data and the accounts are yours, so you can take the system in-house or to another team without losing anything.
Have a security requirement?
Tell us what your business has to comply with, and we will show you how the system meets it.