Security & compliance

You can relax,
because we don't

Alumni trust you with their data. We are built to preserve that trust, passing security reviews at institutions whose audits are the hardest in the world.

Security & compliance

Secure by design, proven by certification.

ISO/IEC 27001:2022 certified

UKAS-accredited certification held (British Assessment Bureau, cert. 266611), covering our platform and hosting environments - with the 2026 surveillance audit passed.

ISO/IEC
27001
2022
Certificate
266611
Accreditation
UKAS
2026 audit passed

Fully private, single-tenant deployment

For the most risk-averse institutions we deploy entirely dedicated infrastructure - full segmentation, your own private install.

Your private install
Application
Database
Network & hosting

GDPR-native controls mapped to your jurisdiction

We build to the strictest GDPR standards then map those controls to the legislation that matters to you. Residency, retention and deletion configurable per client.

Residency
Configurable
Retention
Configurable
Deletion
Configurable

Single sign-on capabilities

Your identity provider, your access policies, your controls.

Sign in with your identity provider

Retention & auto-deletion policies

Automated data-retention and deletion workflows to adhere to data policies.

Auto-deletion workflow

From a vendor audit

When KPMG audited us as a vendor to a top-3 global bank, they closed the in-person stage in two hours - against a typical six - and called it their smoothest vendor audit yet.

Typical vendor
6 hrs
Aluminati
2 hrs

A maintained audit evidence pack

DDQs, controls documentation and evidence kept current.

A compliance manager who's sat on your side

Our dedicated compliance manager spent years inside a major US bank and is well aware of the high standards required.

Dedicated compliance manager

Data processing, contractually plain

Clear DPAs and processing terms your legal team can mark up without archaeology.

Trust & security

Feeling reassured?

Bring your InfoSec team to the first call. We'll bring the evidence pack, the controls and the people behind them.