Security

Encryption

All data is encrypted in transit using TLS 1.2+ and at rest using AES-256. This applies to bill files, contract data, account information, and API communications.

Hosting

Bills from known suppliers are processed on our own UK-based server. Your data does not leave the UK unless you explicitly opt in to AI processing for unfamiliar bill formats.

Account isolation

Each broker account is fully isolated. Your customers, bills, and reports are never visible to other brokers on the platform. There is no shared data layer between accounts.

AI processing controls

If you prefer that no bill data is sent to an external AI reader, we can configure your account accordingly. Bills from unfamiliar supplier layouts will extract less detail, but your data stays entirely on our infrastructure.

Data retention

Uploaded bill files are automatically deleted after 90 days. Validation results and reports are retained for as long as your account is active. On account termination, all data is deleted within 90 days.

Access controls

Platform access is controlled by email-based authentication. Team members can be added and removed by account administrators. All actions within the platform are logged with a full audit trail.

Compliance

• ICO registered — compliant with UK data protection law
• UK GDPR — data processed lawfully with appropriate safeguards
• Energy Ombudsman registered — meeting industry standards for complaint resolution

Reporting a vulnerability

If you discover a security issue, please report it to liam@edge-energy.uk. We take all reports seriously and will respond within one working day.