Data Breach Notification

Automated monitoring watches the platform's logs, errors and security events and raises alerts to our team.

On confirmation of a breach, we follow our incident-response procedure: isolate, assess, preserve evidence and communicate internally.

We notify affected customers without undue delay and in any event within 24 hours of becoming aware of a breach, so that you can meet your own 72-hour obligation to the ICO. The notification includes, as far as known, the nature of the breach, the categories and approximate number of people and records concerned, the likely consequences, the measures taken or proposed, and a named contact.

As your processor, we support you in notifying the ICO. Where Adviser IQ is itself the controller (for example, our own billing records), we notify the ICO within 72 hours of becoming aware, where required under Art. 33 UK GDPR.

Every breach triggers a written post-incident review. Findings feed into security controls, training and sub-processor reviews.