# Security

This page describes how we protect the systems and data we are responsible for. Each statement on it is confirmed by our Chief Technology Officer before it is published.

Last updated 23 September 2026

## Our controls

- **Zero trust and hardware attestation**: We verify every request rather than trusting its origin. In Prime Edge AI every device attests itself in hardware, no key ships in the app, and access tokens expire hourly and carry no identity.

## Reporting and related pages

If you think you have found a security issue in anything we run, please tell us through our vulnerability disclosure policy.

- [Vulnerability disclosure policy](https://gateway-global.co.uk/trust/vulnerability-disclosure/)
- [Subprocessors](https://gateway-global.co.uk/trust/subprocessors/)
- [security.txt](https://gateway-global.co.uk/.well-known/security.txt)

---

Source: https://gateway-global.co.uk/trust/security/
Updated: 2026-09-23