Gow dys y chummal

Trust Centre

Shickyrys, preevaadjys as cooilleeney

Foddee kionneyderyn as scrutineyryn shickyrys RODMENA y chur er bun myr shirveishagh ayns shoh. Ta dagh claim cur y stayd t'eh ec y traa shoh er shilley.

Notey er y stayd. RODMENA she colught aeg (currit er bun Boaldyn 2025) as t'eh troggal e phortfolio shickyrys. Ta dagh teishtys heese soilshit myr cummit, ayns jannoo ny kiarit, as ta shin jannoo ass y noa y duillag shoh tra ta stayd caghlaa.

Toshiaght arrey shickyr

Ta RODMENA ny cholught software 'sy Reeriaght Unnaneysit ta er lheh ayns coryssyn beayn, surranseagh. Ta shin cur y chied cheim cheddin er nyn shickyrys hene: cryphtey tra ta shin goll er trooid son dy chooilley hirveish, reamys beg-chied da coryssyn, bun-troggal hene-reirit er nyn greesaghey, as cliaghtey lhiasaghey jeant dy chummal failleil as dy aachooishaghey voue. Cha nel monney fysseree persoonagh ain, jeant dy lhiettal gys co-reggyrt dellal, as cha nel ynnyd-eggey shoh jannoo ymmyd jeh analitys, lorgaghyn ny cookiaghyn soilsheanagh.

Ta stiurey roshtyn, follaghey, lhiasaghey shickyr, cooyrtyn, stiurey anoadee as freggyrt da taghyrtyn coodit dy chooilley nhee 'sy security whitepaper ain.

Contact shickyrys: security@rodmena.co.uk (jeeagh myrgeddin er responsible disclosure as security.txt).

Çhaghteraghtyn teks veih RODMENA

Cha nel çhaghteraghtyn teks veih platformyn RODMENA, goaill stiagh RODMENA ID as Futex, currit magh agh veih +44 7822 000922, earroo ta er ny chasherickey son çhaghteraghtyn magh RODMENA. Cha nel teks ta gra dy vel eh çheet veih RODMENA veih earroo erbee elley çheet voïn: cur shiu shoh gys security@rodmena.co.uk, ta mee guee erriu. Dy heet hoorin liorish phone ny teks, jean shiu ymmyd jeh +44 7537 179434.

Teishtyssyn as cooilleeney

Certifications, assessments as y stayd t'orroo ec y traa shoh
Teishtys ny enneyStaydCurrit maghJerreyFeanish
Cyber Essentials
Teishtit liorish GDAK (G-DAK Cyber Solution Ltd); Cyber Essentials Partner IASME (skeim fo cooney Reiltys y Reeriaght Unnaneysit). Teishtys 00d24b59-7739-4d97-bb66-341ac50ef018. Rheam: y reihys slane. Croo 3.3 (Danzell)
Feeridit2026-09-302027-09-30Cur lhiat stiagh 'sy chlaar
Cyber Essentials Plus
IASME (scaim UK NCSC). Planned to follow Cyber Essentials
Plandit———
Claaraghey Coadey Fysseree ICO
Information Commissioner's Office. Imraa claaraghey ZC202334 (Tier 1); shickyree er y chooish oikoil ICO claare
Clarit2026-07-192027-07-18Cur lhiat stiagh 'sy chlaar Teishtys (PDF)
ISO/IEC 27001 (Shickyrys Fysseree)
Corp tashtee gialdit liorish UKAS. Er y roadmap myr ta'n cholught gaase
Plandit———
Prowal treanagh
Prowaltagh shickyrys neuchrogheydagh. Bee coontey giare jeh'n reamys as ny reddyn va feddynit magh soilshit magh lurg y chied chur-seose
Plandit———
Cyber Essentials certified: shickyree shiu teishtys RODMENA LIMITED er coarastyr BlockMark

Cyber Essentials

Ta RODMENA LIMITED gialdit fo scaim Cyber Essentials, ta'n Reiltys Ghooagh y Reeriaght Unnaneysit cooney lesh, son y cheshaght ooilley.

Teishtys
00d24b59-7739-4d97-bb66-341ac50ef018
Rheam
Y reihys slane
Coontey
3.3 (Danzell)
Certified
2026 Mean-fouyir 30
Aahartaghey ry-heet
2027 Mean-fouyir 30
Corp teishtee
GDAK (G-DAK Cyber Solution Ltd), marish IASME myr y Cyber Essentials Partner
Cyber insurance
Shickyrys cyber ayn. Fys ry-gheddyn er aggyrt veih security@rodmena.co.uk.

Ta'n teishtys shoh currit sheese dy ren ny coadeyryn ICT ain, tra v'ad currit fo ennal, freggyrt ny h-ymmynyn Cyber Essentials noi eiyrtyssyn kimmeeagh. Cha nel eh ny raane dy bee ad foast jeant dy jarroo noi dy chooilley eiyrtys.

Insurance

Shickyrys cyber ayn. Fys ry-gheddyn er aggyrt veih security@rodmena.co.uk. Ta'n polasey çheet marish y teishtys Cyber Essentials ain as roie son y traa cheddin. Fo ny conaantyn as y chagliagh echey, t'eh geeck son freggyrt er taghyrt, costysyn dellal taghyrt kimmeeagh (coyrle leighoil, forensaigh IT, aachooishaghey fysseree, cur fys da sleih ta goaill toilchinys as commys), coayl cosnee choud as ta ny coryssyn ain brisht, ronsaghey coadey fysseree as eekyn (raad ta'n leigh kied chur), as eyshtyn veih treeoo partee lurg brishey fysseree ny failleil shickyrys. Cha nel eh coodaghey argid va geidit trooid kimmeeys-chyber ny foalsaght son bill, as cha nel eh coadey neeshtey keirdey ny coadey theayagh.

Ta coadey neeshtey keirdey, coadey theayagh as coadey obbree currit fo un polasey as t'eh goaill toshiaght er 1 Mee Houney 2026. Ta coadey currit gys ny creeaghyn ta conaant dy hirrey as currit ayns prowal roish screeu fo-laue.

Polaseeyn inshurance as y stayd roie oc
CoodagheyStaydMynphoyntyn
Professional indemnityEr bunKianglt; ta'n coadey goaill toshiaght er 1 Mee Houney 2026 as roie gys 31 Mee Yerrey Geuree 2027. Insheyder as cagliagh er n'eyshtyn.
Public liabilityEr bunKianglt; ta'n coadey goaill toshiaght er 1 Mee Houney 2026 as roie gys 31 Mee Yerrey Geuree 2027. Insheyder as cagliagh er n'eyshtyn.
Employer’s liabilityEr bunKianglt; ta'n coodaghey goaill toshiaght er 1 Mee Houney 2026 as roie gys 31 Jerrey Fouyir 2027. Insurer as cagliagh er n'iarree.
CyberAyns ynnydSheeynys gys 2027 Mean-fouyir 30, marish y teisht. Insheyder as cagliagh er aghin.

Privaas as coadey fysseree

Ta shin cummal beggan dy haghteryn persoonagh, cagliht gys cooishyn screeuyn dellal. Cha vel y ynnyd-eggey shoh cur cookiaghyn erbee as cha nel eh roie ronsaghey ny lorgeyryn erbee. Ta'n Privacy Policy ain cur sheese dy chooilley nhee er y dellal ain, as ta'n duillag Data Processing Agreement ain cur magh ny cummaltee Article 28 ta shin cur roish.

Aghinyn DPA: legal@rodmena.co.uk · feyshtyn privaas as coadey fysseree: privacy@rodmena.co.uk · aghinyn cummeyderyn fysseree: gdpr@rodmena.co.uk.

Fo-heshaghteyryn

Sub-processors, y purpose t'orroo as c'raad t'ad processal data
ShirveishaghPurposeC'raad ta data goll er processal
OVHcloudShirveishyn mastey nyn greckagh son y cheim stoyr fysseree gientyn as paart dy hirveishyn applaghey, as stoyral reddyn son cooyrtyn drommey fasteyReeriaght Unnaneysit, Yn Rank and Y Ghermaan
iDNetShirveishaghyn mastey dy h-eddyr-vooinjer son y ynnyd-eggey as ny shirveishaghyn baghee, as kiangley yn oikReeriaght Unnaneysit
Cloud NordShirveishyn son roie-ghlennaghey, cur-raaue as y phortaal co-obbreeReeriaght Unnaneysit
Google WorkspacePost-lagh y ph'ersonal, deilaghyn as documintyn, goaill stiagh co-reggyrt rish customeyrynNerin, Steatyn Unnaneysit and buill elley Google
AnthropicClaude Enterprise, yn cooneyder AI ta ny h-inneeneyryn RODMENA ymmyd jeh dy obbraghey e choryssyn, as oddys eh lioaryn obbree as data y akinSteatyn Unnaneysit
GitHubOastaghey coad farraghyn as co-ghlennaghey gyn brisheySteatyn Unnaneysit

Ta'n claar slane, marish dagh colught conaantagh, ny coadeyryn arraghey as ny caghlaaghyn er dy henney veih 2026 Jerrey-fouyir 5, ry-akin er y duillag çhiamble data. Ta caghlaaghyn fogrit ec y chooid sloo 30 laa ro-laue ayns y feed fo-chroder.

Shirveishyn mooie nagh vel çhaglym cooid phersoonagh erbee

Ta RODMENA cmi5 anchoragey e chleayn audit lesh úghdarras stampa traa RFC 3161 theayagh. Ta'n çhirveish shen geddyn digest SHA-256 jeh kione cleayn fo-screeuit, mysh dagh queig minnid jeig, as ynrycan son customeyr ta'n cleayn echey er n'arragh. Cha nel data p'ersonal, enneyderyn ny recortyssyn ynsagh currit huggey. Tra nagh vod eh ve ronsit, cha nel ynsagh, launshyn, raaghyn as assphurtail feanish cummit, as ta anchoragey cur eab reesht er y chied cheau elley.

Prism, giat caslys RODMENA, currit aghinyn gys InferX Technologies, Inc. (Ny Steatyn Unnaneysit) son caslys-çhengey. Cha nel data p'ersonal customeyryn currit huggey. Roish my bee Prism ymmydit lesh data p'ersonal customeyryn, bee'n caslys oastit ayns y Reeriaght Unnaneysit ny currit fo conaant lesh coadeyryn arraghey.

Cha nel ayn ec nyn goarreyder enmyn reamys as shirveishagh DNS agh recortyssyn reamys as cryss.

Responsible disclosure

My ta shiu credjal dy vel shiu er gheddyn anoays shickyrys 'sy ynnyd-eggey shoh ny ayns corrym RODMENA, cur-jee post-l da security@rodmena.co.uk lesh dy liooar mynphoyntyn dy vod mayd yn chooish y aahroggal. Nee mayd nyn report y hoilshaghey, dy cadjin cheu-sthie jeh tree laa obbree, freayll shiu er y chooish, as, my saillee shiu, cur moylley da shiu tra ta'n chooish feerit.

Cha jean mayd cappeeys leighoil noi ronsaghey shickyrys ayns aigney mie ta cur arrym da privasey yn ymmydeyr, ta shaghney boirey er y çhirveish as ta cur traa resoonagh dooin dy lhiasaghey cooishyn roish soilshaghey theayagh. Ta'n policy vondeishagh ain ry-lhaih ec /.well-known/security.txt.

Shirveish as cooney

Ta cooney çheet dy jeeragh veih ny h-inneenyn ta troggal ny coryssyn ain. Ta meenaghey er mooadys, jerkallyn freggyrt as uinnagyn cummal er nyn soilshaghey er y duillag Service and SLA. Ta jerkallyn er lheh son traa seose as freggyrt er nyn goardail rere conaant.

Ta meenaghey er mooadys as y cummey cooney currit magh er y duillag Service & SLA. Ta'n duillag exit & portability cur sheese er y chooish ass. Stayd shirveish bio: y boayrd stayd er uptime.systems.

Policies

Y claare polaseeyn marish laghyn aavriwnys

Foddee imnea mychione drogh-yannoo ve currit er ash dy follit trooid y Speak-Up portal ain, fo'n Whistleblowing / Speak-Up Policy.

Tooilleil