Contents
Security
We understand that trust is built on transparency and protection. Shoorah is designed with security and privacy at its core — safeguarding sensitive data with enterprise-grade technology, ethical handling, and clinical confidentiality.
Introduction
Security and privacy are at the heart of everything we build. Shoorah protects every user, organisation, and data point with the same level of care we apply to mental health itself — through clinical integrity, advanced encryption, and a commitment to transparency.
Data protection
Every piece of data within Shoorah is encrypted — both in transit and at rest — using AES-256 and TLS 1.2+ protocols. This ensures that all information, from personal check-ins to business insights, is stored and transmitted securely.
We are fully GDPR compliant and follow strict data minimisation principles. Data is only retained for as long as necessary to deliver our wellbeing services, and users can request deletion or access at any time.
Our systems are hosted on secure, ISO 27001-certified cloud infrastructure, offering the same level of protection trusted by financial and healthcare organisations worldwide.
Privacy by Design
Confidentiality is central to everything we do. Shoorah uses anonymised and aggregated reporting, meaning individual user data is never visible to employers or administrators. We do not sell, share, or use data for marketing purposes.
Our architecture follows the Privacy by Design and Default framework — embedding ethical, transparent data handling practices into every layer of the platform.
This includes:
- Minimal personal data collection
- Optional consent for wellbeing assessments
- User control over data sharing and visibility
- Regular privacy audits and reviews
Secure infrastructure
Shoorah operates within a multi-layered security environment designed to prevent, detect, and respond to threats proactively.
Our systems include:
- Continuous threat monitoring and vulnerability scanning
- Regular third-party penetration testing
- Multi-factor authentication for all admin and developer accounts
- Strict access control policies and activity logging
- Encrypted backups and disaster recovery systems
We also maintain a robust incident response plan to ensure rapid resolution of any security event — with full transparency and accountability.
Trust & compliance
We partner with leading technology providers and comply with the highest standards of information governance.
Our commitment includes:
- GDPR & UK Data Protection Act 2018 compliance
- ISO 27001-certified hosting and encryption standards
- Regular external security audits and vulnerability assessments
- Clinical confidentiality protocols aligned with healthcare standards
- Full data transparency and user control
Security, privacy, and trust aren’t features — they’re foundations.
With Shoorah, your organisation’s wellbeing data is protected with the same care we give to the people it supports.
Conclusion
Your trust is central to what we do. Every system, process, and feature within Shoorah is designed to safeguard data while supporting people with compassion and care.
If you have any questions about our security practices or data protection standards, please reach out to us directly at info@shoorah.io.
Security, privacy, and trust — protected with the same care we give to wellbeing itself.
