Security Built for B2B Workflows
Peoplely Ltd is building PharmaTek with practical controls for confidential sourcing, RFI, and deal-room workflows. Customer data is isolated by organization and protected through managed cloud infrastructure.
Compliance Ready
Our controls are mapped against common SOC 2 and ISO 27001 expectations. Formal third-party certifications and audit reports are roadmap items for enterprise contracts.
Encryption in Transit and at Rest
Data is encrypted in transit using HTTPS/TLS and at rest by our managed infrastructure providers. Production secrets are stored outside the client application and rotated through the relevant vendor consoles.
Resilient Infrastructure
Hosted on managed cloud infrastructure with production monitoring and backup procedures. Formal uptime SLAs are offered only where included in an annual enterprise order form.
Access control
Per-user authentication with project-scoped data isolation. Enterprise SSO (SAML/OIDC) and granular RBAC are on the roadmap for annual contracts.
GDPR & Data Residency
Peoplely Ltd operates as a UK company, is registered with the Information Commissioner's Office (ICO registration ZC192829), and designs PharmaTek processes around UK GDPR and EU GDPR obligations. Region-specific residency commitments require enterprise review and written agreement.
Workflow audit logging
Sensitive sourcing and deal-room actions are logged for your organization. Expanded exportable audit trails for compliance reviews are rolling out through 2026.
Have specific security requirements?
Our team is available to complete vendor risk assessments, share available security documentation, or discuss custom MSA terms. To report a security vulnerability, please contact info@pharmatek.co.uk.
Contact Security Team