IDENTITYMicrosoft Entra SSO + access controls
01Security & hosting
Security built into the platform. Control stays with you.
askAiB is designed to protect workplace data without making the platform harder to use or administer. Microsoft Azure hosting, encrypted data, controlled access and Microsoft identity integration provide the foundation, backed by our Cyber Essentials certification.
Cyber Essentials certifiedHosted on Microsoft AzureEncrypted in transit + at restUK or US data hosting
askAiB security postureLayered protection across the service
APPLICATION + DATAEncrypted transport, storage + scoped access
02INFRASTRUCTUREMicrosoft Azure hosted environment
03OPERATIONSSecure configuration, updates + monitoring
04Security evidence availableWhitepaper · DPA support · Security questionnaires
Explore security
The controls behind the platform.And the evidence behind the claims.
Start with the area your IT, security or data protection team needs to review.
Cyber Essentials certified
A recognised baseline for practical cyber security.
askAiB holds Cyber Essentials certification, the UK Government-backed scheme focused on controls that protect organisations against common internet-based cyber threats. It gives customers a clear, current baseline for how we manage our own technology environment.
Cyber Essentials is one part of our security approach. We present it for what it is: evidence of core technical controls, not a substitute for your own supplier assurance process.
UK GOVERNMENT-BACKED SCHEMECyber
EssentialsCertified
EssentialsCertified
01 Firewalls02 Secure configuration03 Security updates04 User access control05 Malware protection
Microsoft Azure hosting
Enterprise cloud infrastructure. Clear data residency.
askAiB is hosted on Microsoft Azure. Customers can choose UK or US hosting for their application and data, with other regional requirements discussed during deployment where needed.
- Application and customer data hosted within the selected Azure region
- Azure physical and network security controls protect the underlying infrastructure
- No customer needs physical access to infrastructure to administer askAiB
- Regional requirements can be reviewed as part of implementation and contracting
Hosting configurationChoose the region that fits your requirements
United KingdomAzure region hosting
SelectedUnited StatesAzure region hosting
AvailableApplication hostingSelected Azure regionCustomer dataSelected Azure regionInfrastructure controlsMicrosoft Azure
Other regional hosting requirements can be reviewed with askAiB.
Identity & access
Give the right people access. Keep administration under control.
askAiB can connect to Microsoft Entra ID for single sign-on and automated provisioning, so access can follow the identity environment your IT team already manages rather than creating another disconnected user directory.
Microsoft Entra SSO
Users can sign in with organisational Microsoft identities. Where your Entra policies require MFA, those controls remain part of the sign-in flow.
Roles and permissions
Control what users and administrators can see and manage using defined roles, groups and platform permissions.
Automated provisioning
Provision users from Entra and map agreed directory attributes into askAiB to reduce manual user administration.
Data protection
Protect data in transit, at rest and in use.
Workplace data should be available to the people and services that need it, and protected from those that do not. askAiB combines encrypted connections and storage with organisation-scoped access and controlled support access.
Encrypted in transit
Live service access uses secure HTTPS/TLS connections.
Encrypted at rest
Customer data stored within the Azure-hosted service is encrypted at rest.
Organisation-scoped access
Platform permissions and tenancy boundaries are used to keep customer access appropriately separated.
Controlled support access
Administrative and support access is restricted to authorised personnel and used when required to provide the service.
Operational security
Security does not stop when the platform goes live.
Technology controls only work when they are maintained. askAiB combines platform safeguards with ongoing operational processes covering configuration, software updates, service monitoring, access management and recovery.
Services and administrative access are configured to limit unnecessary routes into the environment.
Security updates and supported software versions form part of the platform and company security baseline.
Application and Azure service monitoring supports investigation of availability, errors and unusual behaviour.
Backup, recovery and incident processes are maintained as part of operating the hosted service.
Security review & documentation
Need evidence for procurement, IT or a DPIA? Ask us for it.
A web page should not be your full supplier assurance process. We can provide more detailed information for customer security, privacy and procurement reviews, and work through reasonable security questionnaires with your team.
Contact us for security documentsSecurity & Hosting Whitepaper
More detail on platform hosting, architecture and security controls.
Cyber Essentials evidence
Current certification details for your supplier assurance records.
Data protection information
DPA, data handling, retention, deletion and subprocessor information where applicable.
Security questionnaires
Send us your IT, procurement or information-security questionnaire for review.
Security FAQs
Common questions from IT, security and procurement teams.
Where is askAiB hosted?
askAiB is hosted on Microsoft Azure. UK and US hosting are available, with other regional requirements reviewed with customers where needed.
Is customer data encrypted?
Yes. Access to the live service uses secure HTTPS/TLS connections and customer data stored within the Azure-hosted service is encrypted at rest.
Does askAiB support single sign-on and MFA?
askAiB supports Microsoft Entra single sign-on. Where your organisation enforces MFA through Entra, that policy remains part of the authentication flow.
What security certification does askAiB hold?
askAiB holds Cyber Essentials certification. Contact us for current certification evidence and for more detailed security and hosting documentation.
Can our security team carry out a supplier review?
Yes. We can provide our Security & Hosting Whitepaper and supporting data-protection information, and respond to reasonable customer security questionnaires.
Does Microsoft Azure certification mean askAiB holds the same certifications?
No. Azure provides the underlying cloud infrastructure and has its own compliance portfolio. We keep those platform assurances separate from certifications held directly by askAiB.
Need more than a web page? Talk to us.
Request our security and hosting documentation, send us your supplier questionnaire or discuss a specific data residency, identity or deployment requirement with the askAiB team.