Does Click4Assistance support password policies?
Yes.
Organisations can implement password policies appropriate to their security requirements. When Single Sign-On is used, password management is typically controlled through the organisation's identity provider, enabling consistent authentication policies across enterprise systems.
How is data protected during transmission?
Data exchanged between users and the Click4Assistance platform is encrypted using industry-standard transport encryption.
This helps protect information from interception while it is transmitted between the user's device and the platform.
How is data protected when stored?
Customer data stored within the platform benefits from the security controls provided by the hosting environment, including encryption at rest and controlled access mechanisms. These measures help protect stored information against unauthorised access.
Does Click4Assistance maintain backups?
Yes.
Operational data is backed up in accordance with documented backup procedures to support business continuity and disaster recovery objectives. Backup processes are regularly reviewed as part of the company's information security management practices.
What is Disaster Recovery?
Disaster Recovery (DR) refers to the processes and technical measures designed to restore services following a significant disruption.
Click4Assistance utilises resilient cloud infrastructure and documented recovery procedures to support service continuity and minimise downtime in the event of an incident.
What is Business Continuity?
Business Continuity refers to an organisation's ability to continue delivering services during and after disruptive events.
Click4Assistance maintains documented business continuity arrangements that support the continued operation of its customer engagement platform and associated support services.
Is the platform resilient?
Yes.
The platform has been designed using resilient cloud infrastructure to support high levels of availability, scalability and operational reliability. Resilience is achieved through a combination of cloud architecture, monitoring, backup procedures and disaster recovery planning.
Does Click4Assistance monitor its platform?
Yes.
The platform is monitored to help identify operational issues, maintain service availability and support ongoing performance. Monitoring enables technical teams to respond quickly to potential issues and maintain a reliable service for customers.
Does Click4Assistance support audit requirements?
Yes.
The platform provides audit capabilities that assist organisations in demonstrating governance, monitoring administrative activity and supporting compliance with internal policies and external regulatory requirements.
Is customer data shared with other customers?
No.
Each customer operates within a logically segregated environment designed to ensure customer information remains isolated from other organisations using the platform. This segregation forms an important part of the platform's multi-tenant architecture.
Does Click4Assistance use secure APIs?
Yes.
APIs are designed to enable secure communication between the platform and authorised third-party applications. Authentication and authorisation mechanisms help ensure only approved systems can access integrated services.
Can organisations configure data retention?
Yes.
Data retention periods can be configured to align with organisational policies, contractual requirements and applicable legislation. This allows organisations to determine how long conversation data and related information should be retained before deletion, subject to legal obligations.
Can organisations export their data?
Yes.
The platform includes reporting and secure data extraction capabilities that enable organisations to access and export their information for operational, reporting or migration purposes, subject to appropriate permissions.
Does Click4Assistance support accessibility standards?
Yes.
The platform has been developed with support for WCAG 2.2 accessibility principles, helping organisations provide inclusive digital services and improve access for users with diverse accessibility needs. Accessibility is considered throughout the design of both customer-facing and administrative interfaces.
How does Click4Assistance support regulated sectors?
Click4Assistance combines enterprise security, UK-hosted infrastructure, ISO/IEC 27001:2022 certification, role-based security, audit capabilities and configurable governance to support organisations operating in regulated industries.
The platform is used across sectors including financial services, insurance, healthcare, education, housing associations and the public sector.
Does Click4Assistance provide a Data Processing Agreement (DPA)?
Yes.
A Data Processing Agreement (DPA) is available to define the respective responsibilities of Click4Assistance and its customers regarding the processing of personal data. The DPA supports organisations in meeting their obligations under applicable data protection legislation.
Does Click4Assistance use sub-processors?
Yes.
Where third-party service providers are used to support delivery of the platform, Click4Assistance maintains transparency regarding those providers and their role in processing customer information. Customers can review relevant sub-processor information as part of the company's compliance documentation.
Why do security-conscious organisations choose Click4Assistance?
Security-conscious organisations choose Click4Assistance because security is integrated throughout the platform rather than added as an afterthought.
Key security benefits include:
- UK-designed, developed, hosted and supported platform
- Microsoft Azure UK hosting
- Customer data remains within UK-hosted infrastructure
- ISO/IEC 27001:2022 certified Information Security Management System
- Multi-Factor Authentication (MFA)
- Single Sign-On (Microsoft Entra ID and Okta)
- Role-based access control
- Encryption in transit and at rest
- Audit logging
- Regular penetration testing
- Support for WCAG 2.2 accessibility
- Configurable retention policies
- Enterprise integrations through secure APIs
These capabilities help organisations implement secure, compliant and scalable customer engagement solutions suitable for highly regulated environments.