How we protect your data

corresmo is in active development. Today the platform holds no client business data — and security and data protection are being designed in from the start, not added later.

Where we are today

No client data held

During development the platform does not process or store your business data. There is none of it here to expose. The same is true of the Try it page: whatever you type there stays in your own browser, and nothing is stored or sent to us.

Early sessions

If you share details of a decision so we can model it with you, we treat that as ordinary business correspondence — used only for that session, not loaded into any system.

Independently certified

We hold Cyber Essentials and Cyber Essentials Plus, the UK government-backed scheme covering the core technical controls that guard against common cyber threats.

Our certification

Independently assessed against the UK government's Cyber Essentials scheme. corresmo is the trading name of kharismatics Ltd, and all certifications are held in that legal entity's name.

How we are building it

The principles the platform is being designed around, ready for when it does handle client data.

Data minimisation

We ask only for what a decision genuinely needs to be modelled — nothing we do not require.

Access control

Access to any client information will be limited to those who need it, and recorded.

Encryption in transit

This site is served over an encrypted (HTTPS) connection, and the platform will be too.

Hosting

The platform will run on Amazon Web Services (AWS) in London. Deployment begins in October 2026. Clients share one platform, but each client’s information is walled off from every other’s: no login can reach another client’s business cases. A client that needs its own copy of the platform, including one in another country, can have one by arrangement.

Independent testing

We have commissioned independent threat assessment and penetration testing. Penetration testing follows deployment, and each assessment is followed by remediation and re-testing. We are happy to discuss the findings and what we changed as a result.

Data protection

How we handle personal data is set out in our privacy notice. If you have a specific security or data-protection question, we are glad to answer it directly.

Read our privacy notice