Confidentiality is managed through the Microsoft Azure Active Directory services, which ensures that all users have access to authorised data only. This is set up and managed by a small group of authorised individuals at Shireburn with a strict and audited access control mechanism. As Sophos partners, we made sure that the environment is protected with the Sophos Endpoint technology, which protects the data against malware which protects the data against integrity compromising malware attacks. Secure backups are taken daily and with a 35 day point in time recovery. All backups and disks are encrypted at rest. A snapshot retention period is also set. The data is hosted on robust Microsoft Azure EU-hosted servers. The environment is managed by Shireburn’s IT team to ensure that the Shireburn applications, as well as the ancillary applications, are maintained and continuously updated to the latest versions.