Assurance

How we look after your data and systems.

What your procurement, security and compliance teams usually want to know before working with us. If you need something that isn’t covered here, ask, and we will answer it in writing.

The company

Who you are contracting with.

Legal name
CacheStack Ltd
Company number
17179570
Registered in
England and Wales
Registered office
167-169 Great Portland Street, 5th Floor, London, W1W 5PF
ICO registration
ZC221322Check the ICO register

Insurance

Covered, and happy to show it.

Certificates of insurance are available on request.

  • Professional indemnity

    £1,000,000

    Aggregate limit, including costs.

    Insurer: Hiscox

  • Cyber and data

    £100,000

    Cyber and data insurance.

    Insurer: Hiscox

  • Public and products liability

    £2,000,000

    Each and every claim or loss, excluding defence costs and representation costs.

    Insurer: Hiscox

How we build

Security and data, by default.

How the systems we deliver handle sign-in, data and AI, as standard rather than as an add-on.

  1. Security tested before it reaches you

    Every platform we deliver is security tested, so that what goes live is as secure as we can make it. Testing is part of delivery, not an optional extra.

  2. Sign-in that fits your infrastructure

    Platforms we build aim to use your existing Microsoft Entra ID and Microsoft 365 sign-in, so access is managed in the directory you already run. Where that isn’t an option, we build secure sign-in with multi-factor authentication.

  3. Your data never trains AI

    Model training is disabled and zero data retention is enabled across every AI integration we build, so what your people put into a system is not stored by the AI provider or used to train its models.

  4. Hosting chosen per project

    Client data is typically hosted in the UK. Some projects use EU or US services where the design calls for them, and the hosting for each project is set out as part of its technical design.

  5. Data minimised by default

    We store what a system needs and nothing more. Our own AI phone line, for example, holds a call’s transcript in memory only for the length of the call and stores none by default.

  6. Designed to fail safely

    Limits, cost controls and fallbacks are part of the build. Our phone line runs behind an admission gate, in-call limits and a daily budget cut-off, and hands over to a human number on its own if its AI stack is ever down.

  7. AI that shows its sources

    Where a system uses AI to answer questions or draft content, we make it traceable: answers cite the page they came from, and AI-drafted material is marked as such so people know what to check.

Sub-processors

The services we build on.

Where applicable. Which of these a project uses depends on its design, and the ones it relies on are set out as part of that design.

  • Microsoft AzureCloud hosting, AI services and identity
  • VercelWeb application hosting and deployment
  • SupabaseDatabases, authentication and file storage
  • OpenAIAI models
  • OpenRouterAccess to AI models from several providers
  • GitHubSource code hosting and version control
  • StripePayments, where a project takes them

Working terms

How billing and ownership work.

Billing
A day rate for the time the work takes. Published figures are estimates based on comparable projects; the rate itself is shared once project discussions begin.
Invoicing
Every 7 to 14 days, in step with the work.
Payment terms
14 days.
Intellectual property
Transfers to you on project completion, once all invoices are settled. Pre-existing CacheStack tools and third-party components remain subject to separate ownership and licensing arrangements.
Handover
Your choice at the end of a project: we hand over the codebase in a private Git repository, with documentation, or we carry on managing and improving the platform for you on an ongoing retainer.
Third-party costs
Hosting and AI usage passed through at cost with no mark-up, either re-invoiced by us or on accounts in your own name.

For procurement

Send us your questionnaire.

If your organisation has its own supplier or security questionnaire, send it over and we will work through it with you.

Documents

  • Certificates of insuranceAvailable on request

Get started

Ready to discuss your project?

Book a free 30-minute call. We will ask the right questions, give you an honest assessment, and explain exactly how we would approach your project.