Trust and security, verified
Everything your security and procurement team needs to evaluate Disciple (certifications, data residency, sub-processors and data rights) in one place, with the live evidence a click away.
Visit the Trust CentreCertified, GDPR compliant
Data residency, chosen at onboarding
No lock-in, no exit fee
01
Certifications
Certified. Verifiable.
ISO 27001
ISO 27001 certified
Certified to the international standard for information security management by an IAS-accredited certification body, and re-verified annually through surveillance audits.
GDPR
GDPR compliant
Founded in London over a decade ago, Disciple has always operated under GDPR.
02
Infrastructure & hosting
Where it lives, how it's protected
Hosting
EU or US hosting
Your data lives in the region you choose at onboarding, until the end of your contract.
Encryption
Data encryption
Your data is hosted on established cloud infrastructure and encrypted in transit and at rest.
High availability
Resilient by design
Your community runs across multiple independent data centres. A synchronised copy of your data is kept in a separate location at all times, so if one goes down, the other takes over and your members experience no interruption.
Data isolation
Isolation by default
Each customer's data is stored in its own dedicated database.
Testing
Independently tested
We regularly engage a CREST-accredited security firm to assess the platform for vulnerabilities, with fixes applied as soon as they're identified.
Backups
Daily backups
Your community's data is backed up daily and stored securely.
03
Sub-processors
Full visibility, nothing hidden
Documentation
Data Processing Agreement
Our standard Terms include a Data Processing Agreement, setting out our responsibilities as your data processor.
Read the Terms of ServiceFull list
Every sub-processor published
Every third party with access to your data is listed, along with what they do and where they operate.
View the full list04
Data rights
Your data, your exit ramp
Export
Full data export
Members, posts, and analytics export in full whenever you ask for them.
Deletion
Members control their own data
Members can request export or deletion of their personal data at any time, in line with GDPR.
No lock-in
Leave with everything
If you ever decide to leave, you take your member data, content, and analytics with you.
05
Reliability
Reliable, and accountable
Uptime
99.95% uptime target
We target a minimum of 99.95% app uptime year-round, as set out in our Terms of Service.
Incident response
People you can reach
You have tech support as your first point of contact if anything goes wrong, and a Customer Success Manager who follows up on your launch. In the event of a data breach, we notify you without delay.
What's in the Trust Centre
The Trust Centre covers security compliance, infrastructure safety, data privacy, organizational controls, and certifications — showing exactly how we protect your community and your members' data.