Security and data protection
How Sterlingrid protects the credit data lenders and dealers trust us with, and how your team can verify it.
Overview
UK data residency
Customer data and backups are stored in UK data centres.
Encryption
TLS in transit and encryption at rest for all customer data.
Identity
SAML 2.0 and OpenID Connect single sign-on, with MFA on every account.
Least access
Role-based permissions for lender and dealer users, set by your administrators.
Audit trail
Every view, change and decision recorded against a named user and kept tamper-evident.
Resilience
Daily encrypted backups, kept in the UK and restored in regular tests.
The detail
The answers your risk, compliance and IT teams usually ask for first.
- Hosting and residency
Sterlingrid runs on [Cloud provider] infrastructure in UK regions. Customer data, including backups, does not leave the UK.
- Encryption
All traffic uses TLS 1.2 or higher. Data at rest is encrypted with AES-256, with keys managed by our cloud provider’s key management service.
- Identity and access
Single sign-on through SAML 2.0 or OpenID Connect. Multi-factor authentication is required on every account. Your administrators control roles and can remove access immediately.
- Audit and evidence
Every record view, change, approval and export is logged with the user, time and before-and-after values. Logs can be exported for internal and external audit.
- Backups and recovery
Encrypted backups are taken daily and kept in the UK. Restores are tested on a regular schedule.
- Testing
The platform is tested by an independent penetration testing firm at least once a year. A summary is included in our security pack.
- Data protection
We process personal data under the UK GDPR and the Data Protection Act 2018. For the data in your account, your firm is the controller and Sterlingrid is your processor under a data processing agreement.
- Our role
Sterlingrid is software. We don’t lend, arrange credit or make credit decisions. Your firm does, and your regulatory obligations stay with you. We design the platform to help you keep the records those obligations call for.
Responsible disclosure
If you believe you have found a security issue in Sterlingrid, email security@sterlingrid.com with the details.
Please give us a reasonable time to fix the issue before sharing it publicly, and don’t access or change data that isn’t yours. We will confirm receipt and keep you updated.
Put your book on the grid
See Sterlingrid with examples shaped around your facilities, your approval mandates and your dealers.
- A 30-minute walkthrough with someone who knows dealer lending
- Your credit process mapped against the platform
- A rollout plan for your live book
- No commitment after the call