Secure by design
Identity, role-based access, tenant isolation and controlled administrative access are built into the platform architecture.
TRUST & SECURITY
Trusted by design.Governed in practice.
Keston Pulse is built with security, privacy and governance as core platform requirements — not bolt-ons.
CONTACTinfo@kestongroup.co.uk
PORTALpulse.kestongroup.com
BASEDUnited Kingdom
Last updated: 20 August 2026
Secure identity and access
- Supabase-backed authentication for platform sign-in
- Role-based access for administrators, client users and portfolio users
- Tenant isolation so one organisation cannot read another's workspace
- Controlled administrative access for platform operations
Data protection
- Encrypted transport (TLS) for public services
- Access controlled by signed sessions and server-side authorisation
- Secure storage architecture for platform data and operational backups
- Backup and restore practices for the Pulse data volume
Evidence and auditability
- Provenance, freshness and confidence are first-class platform concepts
- Audit events for privileged operational actions
- Human approval remains required for decisions — the platform does not silently act
Platform security
- Secure development practices with automated regression coverage for auth and isolation
- Dependency review as part of release hygiene
- Rate controls on authentication and Ask Pulse abuse surfaces
- Hardened workbook ingestion with validation before promotion
- Logging and monitoring for operational visibility
AI governance
- Ask Pulse answers are grounded in authorised, tenant-scoped context
- Cross-tenant retrieval is refused by design
- Human approval remains required for decisions and actions
- External generative providers are optional and can be disabled per client
Security frameworks
Security controls and operating practices are designed with reference to recognised frameworks including ISO/IEC 27001, SOC 2 Trust Services Criteria and OWASP guidance. This is a design orientation — not a claim of formal certification or independent attestation.
Assurance roadmap
Independent penetration testing and formal assurance are part of Keston's security maturity roadmap. Enterprise clients can request current control detail through a security questionnaire and, where appropriate, a scoped assurance engagement.
These pages are provided for general information about how Keston Group operates its marketing site, contact channels and related services. They are not legal advice. If you need advice on your own position, please speak with a qualified adviser.
Security & assurance
Built for trust.Designed for assurance.
Security and trust are designed into Keston Pulse from the outset. Our controls and operating practices are mapped against recognised frameworks including ISO/IEC 27001, SOC 2 and OWASP guidance, with independent security testing forming part of our assurance programme.
Evidence & accountability
Provenance, confidence, freshness, audit events and human approval provide a visible trail from evidence to decision.
Continuous assurance
Security testing, vulnerability management, dependency review, backup and recovery form part of the platform’s ongoing security programme.
Independent assurance
Independent security assessment and penetration testing form part of our assurance roadmap as the platform progresses through commercial deployment.
- ISO/IEC 27001
- SOC 2
- OWASP
- UK GDPR
- Cyber Essentials
Frameworks shown represent alignment and assurance objectives. They do not imply certification unless explicitly stated.
Current assurance status
- Security controls
- Implemented and continuously reviewed
- Tenant isolation
- Implemented
- Secure authentication
- Implemented
- Security framework mapping
- In place
- Independent penetration testing
- Assurance roadmap
- Formal certification
- Not currently claimed
Request a security conversation.
For enterprise security questionnaires, assurance detail, or a walkthrough of Keston Pulse controls, contact the team.