Trust & Security
The policies behind the platform, for the security and compliance teams reviewing us.
Last updated October 21, 2026
Policies
How we protect your data, keep the service running and do business responsibly.
Resilience & operations
Business Continuity & Disaster Recovery Policy
This policy establishes Subcontext's approach to maintaining service availability and recovering from disruptive events. It sets out how the platform is built to withstand...
Version 1 · Updated October 21, 2026 Read the policyExit Plan & Data Return Policy
This policy explains how a customer can leave Subcontext in an orderly way: how they get their data back, how we support the move to another provider, and how their data is...
Version 1 · Updated October 21, 2026 Read the policyOperational Resilience Statement
Many of our customers are regulated firms that must keep their important business services within impact tolerances, including under the FCA's and PRA's operational resilience...
Version 1 · Updated October 21, 2026 Read the policySupplier Risk Management Policy
This policy sets out how Subcontext selects, contracts with and monitors the suppliers and sub-processors that the platform depends on, so that the risks they bring are...
Version 1 · Updated October 21, 2026 Read the policyService Levels & Support Policy
This policy sets out the availability we aim for, how customers get support, and how quickly we respond.
Version 1 · Updated October 21, 2026 Read the policyEnterprise Order Form
Fixed-term and negotiated plans are agreed on an Order Form under our Terms of Service. Here is the template we use.
Questions from your security or procurement team?
We're happy to answer questionnaires and talk through any of these policies.