Password Complexity Standard

We enforce a password complexity standard to ensure that your passwords are strong and resistant to brute-force attacks. When creating an account or updating your password, we require a combination of uppercase and lowercase letters, numbers, and special characters.

Secure Hash Algorithms

All credentials, including passwords, are securely stored using industry-standard hash algorithms. Hash algorithms convert your passwords into a unique string of characters that cannot be reversed or decrypted, providing an additional layer of protection against unauthorized access.

Google Account Integration

In addition to creating accounts directly with us, we also offer the option to sign up and log in using your Google account. This integration leverages Google's secure authentication infrastructure, ensuring a seamless and secure login experience for our users.

Data Hosting and Storage

Optiml's services and data are securely hosted within Amazon Web Services (AWS) UK and EU facilities. AWS provides robust infrastructure and advanced security controls to protect our systems and your data, in line with UK GDPR data residency expectations.

Encryption

All data transmitted to and from Optiml is encrypted in transit using 256-bit encryption. Our API and application endpoints exclusively use TLS/SSL protocols and have received an "A" rating on Qualys SSL Labs' tests, ensuring the highest level of encryption strength.

Failover and Disaster Recovery (DR)

Optiml's infrastructure and data are distributed across multiple AWS availability zones, with built-in failover and disaster recovery capabilities. Even in the event of a localised failure, our systems remain operational and your data remains accessible.

Confidentiality

To maintain the confidentiality of sensitive information, all Optiml employment contracts include a confidentiality agreement. This agreement is signed and returned by employees before they start their employment, emphasising the importance of data protection.

Training

We prioritise ongoing education and awareness of our employees on security practices. All Optiml employees complete annual Security and Awareness training, ensuring they are well-informed about potential risks and equipped to make secure decisions.

Policies

Optiml has developed a comprehensive set of security policies covering a wide range of topics. These policies are regularly updated to align with evolving security best practices and UK GDPR requirements. They are shared with all employees to maintain a common understanding of our security expectations.