Hosting and infrastructure
STU runs on reputable cloud infrastructure with data hosted in the UK/EU. Environments are logically separated, and production access is restricted to the systems and people that need it.
Encryption
Data is encrypted in transit using TLS, and encrypted at rest. Secrets and credentials are stored in managed, access-controlled stores, never in plain text.
Access control
- Role-based access so people only see what their role requires.
- Two-factor authentication available on administrative accounts.
- Least-privilege access to production, reviewed regularly.
Availability and backups
We take regular, encrypted backups and monitor the platform for availability and unusual activity so issues are caught early.
Reporting a vulnerability
If you believe you have found a security issue, please email security@stu.solutions. We investigate all reports promptly and are grateful for responsible disclosure.
Standards
We align our practices with recognised security standards and are progressing towards formal certification. Contact security@stu.solutions for the current status or to request our security documentation.