ISO 27001 certification
Our information security management approach includes risk assessment, documented controls and regular independent review. Request the current certificate and scope for your supplier assessment.

Data security
Give your communications, IT and information governance teams a clear route to discuss security and data protection.
Book a demo →PROTECTING THE PEOPLE BEHIND THE DATA
Trusted Delivery brings NHS communications together with UK hosting, security certification and a team you can talk to. Protection is part of how we operate, from the infrastructure behind your campaigns to the people supporting your account.
Our UK-based servers are monitored around the clock. Independent security audits and ongoing risk assessments help us review our safeguards and keep information security under active scrutiny.
Request our security documentation →
Information security management backed by independent assessment.
SECURITY YOU CAN REVIEW
Our information security management approach includes risk assessment, documented controls and regular independent review. Request the current certificate and scope for your supplier assessment.
Our hosting infrastructure is based in the UK, with support from our Exeter team. You can discuss data location and operational arrangements directly with the people supporting your account.
NewZapp holds Cyber Essentials certification. This provides assurance around baseline technical controls designed to address common cyber threats.
SUPPORTING YOUR GOVERNANCE REVIEW
Your information governance and IT teams need to understand how a supplier fits your organisation’s requirements. We’ll help you gather the information needed for that review before you move forward.
Tell us which documents, technical questions and approval steps are part of your process. Bringing the right people into the conversation early helps avoid last-minute surprises.
Talk to us about data protection →Send us your supplier questionnaire or the areas you need to cover.
DATA PROTECTION IN PRACTICE
Data protection is also about everyday choices. Consider what staff information a campaign needs, who should receive it and which colleagues need access to create or review it.
Agree a process for maintaining recipient lists, reviewing account access and handling staff questions. We can discuss how the platform supports your workflow and where your organisation’s own policies apply.
Review your sender identity and recipient environment alongside data handling. Trusted Delivery combines your NHS email campaign requirements with design and reporting tools for your communications team.
Explore @nhs.net-to-@nhs.net delivery →YOUR SECURITY QUESTIONS
Yes. Contact our team for the current ISO 27001 and Cyber Essentials documentation, including the information needed to check scope and validity.
Yes. Bring them into the conversation so we can work through your technical and data protection questions together.
No. Hosting location is one part of your assessment. You should also review the proposed processing, contractual arrangements and your organisation’s responsibilities.
MAKE EVERY MESSAGE MATTER
We’ll help you bring the platform, delivery and security questions together.




