--- title: "Security and compliance, built into Wren." url: "https://www.wren-data.co.uk/security-and-compliance" description: "Learn how Wren Data protects customer information and supports responsible UK B2B marketing through UK hosting, encryption and ICO-led data protection." --- SECURITY & COMPLIANCE # Security and compliance, built into Wren. Wren combines UK-hosted infrastructure with data protection practices shaped by ICO guidance, giving your team clearer controls when using business data. [See how we build our data](/business-data/how-we-build-it/) [View our privacy policy](/legal/privacy/) - UK-hosted infrastructure - ICO registered - UK GDPR & PECR Data sources Data quality Related records Retention timeline Business record ### Customer agreement WD-2024-11827 Active Verified Customer Acme Industries Record type Contract Retention 7 years Classification Confidential Data region United Kingdom Owner Compliance Linked data 3 files 2 tables 1 source Privacy Personal data protected Permissions Access controls enforced Retention Retention policy active Accuracy Data validated PLATFORM SECURITY ## Protected from upload to export Security controls protect customer and platform data at every stage, from authentication and upload to processing, storage and export. [Explore the platform →](/marketplace/) Data protection ### Encryption Stored data is protected using AES-256 encryption, with TLS used to protect data moving between users, services and the platform. ![](/_astro/fingerprint.DPI7-sP4_ik1sV.webp) ### Access control Role-based permissions, multi-factor authentication and controlled administrative access help limit data access to authorised users. ### Monitoring and audit records System monitoring and audit logging help us detect unusual activity, investigate events and maintain operational oversight. ### Resilience and recovery Automated backups and documented recovery processes support platform availability and the restoration of protected data. ### Secure uploads and retention Uploaded files pass through controlled, access-checked processes and are retained only for defined periods. Responsible AI ### Private, controlled AI AI-assisted processing runs within controlled services. Customer uploads are not submitted to public AI tools or used to train public models. UK hosted ### Your data stays in the UK Wren is built, hosted and maintained in the UK. Customer data, processing and primary storage remain within our controlled UK-hosted environment. ACCOUNTABILITY BY DESIGN ## Data protection built into how we work Our responsibilities, decisions and controls follow the ICO’s accountability and data protection by design principles. [See how we build our data →](/business-data/how-we-build-it/) ### Use Why and how we use data. 01 #### Lawful and transparent We document why data is processed and explain how it is collected, used and shared. 02 #### Purpose limitation Data is used only for defined and appropriate business purposes. ### Quality Keeping data accurate and minimal. 03 #### Data minimisation We limit data to fields with a clear and relevant business use. 04 #### Accuracy Records are maintained through structured validation and update processes. ### Governance Managing data over time. 05 #### Retention and deletion Defined schedules govern customer uploads, account data and operational records. 06 #### Demonstrable accountability Policies, responsibilities and risk assessments document what we do and why. SECURITY & COMPLIANCE FAQ ## Security and compliance questions ### Is Wren Data registered with the ICO? Yes. Wren Data is registered with the Information Commissioner’s Office as a data controller. Registration confirms our inclusion on the ICO’s public register of data protection fee payers. It is not an ICO certification or endorsement. ### Is Wren Data hosted in the UK? Yes. Wren’s primary platform infrastructure, customer data and processing are hosted in the UK. ### Does UK GDPR allow B2B marketing? UK GDPR does not prohibit B2B marketing. Organisations must have an appropriate lawful basis when processing personal data, follow the relevant PECR rules and respect the absolute right to object to direct marketing. The requirements vary according to the recipient and marketing channel. ### Does using Wren make a campaign compliant? Wren provides data, suppression information and platform controls designed to support responsible marketing. Each customer remains responsible for the purpose, targeting, lawful basis and delivery of its campaigns. ### Does Wren use customer files to train AI models? No. Customer uploads are not used to train public or shared AI models. AI-assisted processing takes place through controlled services subject to Wren’s security and data handling requirements. ### How long are uploaded files retained? Uploaded files are retained according to the service being used and the applicable retention schedule. Files uploaded to Pulse are automatically deleted after 30 days. [Read our privacy policy](/legal/privacy/) [Any other questions? Get in touch](/contact/) RESPONSIBLE MARKETING ## Supporting responsible B2B marketing UK GDPR and PECR allow responsible business marketing, but the rules depend on the recipient, the information used and the method of contact. Wren provides data and controls that help customers make informed campaign decisions. [Read the ICO’s direct marketing guidance ↗](https://ico.org.uk/for-organisations/direct-marketing-and-privacy-and-electronic-communications/) [See how we build our data →](/business-data/how-we-build-it/) ### Before using business data - Confirm the campaign’s purpose and lawful basis - Apply the relevant rules for the recipient and contact channel - Check TPS, CTPS and suppression information - Clearly identify the sender and provide a simple opt-out - Honour objections and maintain suppression records INFORMATION SECURITY MANAGEMENT ## How we manage information security Wren’s security practices are designed around ISO/IEC 27001 principles, with documented policies, responsibilities and risk-based controls applied across our infrastructure, software, people, suppliers and day-to-day operations to protect the confidentiality, integrity and availability of information. Risk ### Assess and treat risk We identify information security risks, assess their likelihood and impact, and apply controls according to the sensitivity of the information and the services involved. Access ### Control access Access is restricted according to role and business need. Administrative access is controlled, reviewed and protected using measures including multi-factor authentication. Systems ### Protect and monitor systems Encryption, system monitoring, audit records, vulnerability management and controlled change processes help protect the platform and identify unusual activity. Response ### Prepare for incidents Documented incident-response, backup and recovery procedures support timely investigation, containment and restoration. Suppliers ### Manage suppliers Suppliers that may process or access information are reviewed according to risk, with appropriate security and data-protection requirements included in our agreements. Governance ### Review and improve Security controls, risks and working practices are reviewed as our platform, suppliers, data and regulatory obligations change. [Request further security information →](mailto:dpo@wren-data.co.uk?subject=Security%20information%20request) USE WREN DATA ## Put our data to work Build new audiences, understand markets and improve the data you already hold. Build new audiences or improve the data you already hold. Build audiences Find businesses and contacts using 100+ criteria. Analyse markets Explore businesses by sector, location and size. Check your data Find quality issues, gaps and opportunities. Enrich and connect Add missing fields and export to your systems. MARKETPLACE 1 of 4 ### Build a precise audience Build a precise audience Combine company, contact, location and specialist criteria to find the businesses and people you need. Find businesses and contacts using 100+ criteria. [Explore Marketplace](/marketplace/) - 100+ search criteria - AI and map search - Tailored exports - 100+ search criteria - AI and map search - Tailored exports [Explore Marketplace](/marketplace/) Matching companies 64,980 Named contacts 38,240 AI search Recruitment firms in the South East with 10–50 staff Recruitment firms in the South East 4 filters applied Recruitment London + South East 10 – 50 staff £1M – £10M Companies 64,980 ![](/assets/company-logos/sky.png)Sky UK Ltd Media & Broadcasting ![](/assets/company-logos/bt.png)BT Group Telecommunications ![](/assets/company-logos/hsbc.png)HSBC UK Financial Services ![](/assets/company-logos/next.png)Next Retail Ltd Retail Contacts 38,240 ![](/assets/avatars/avatar-4.webp)Alison Pickering VP of Sales ![](/assets/avatars/avatar-5.webp)Graham Sowerby Head of Procurement ![](/assets/avatars/avatar-2.webp)Wendy Calvert Operations Director ![](/assets/avatars/avatar-3.webp)Pete Ellison Marketing Director ![](/assets/avatars/avatar-6.webp)Gail Thornton Finance Manager ![](/assets/avatars/avatar-7.webp)Malcolm Beadle Managing Director ![](/assets/avatars/avatar-4.webp)Priya Raval IT Director ![](/assets/avatars/avatar-3.webp)Stephen Doyle Commercial Lead Matching companies 64,980 Named contacts 38,240 Recruitment firms in the South East Recruitment London + South East 10 – 50 staff ![](/assets/company-logos/sky.png) Sky UK Ltd Media & Broadcasting ![](/assets/company-logos/bt.png) BT Group Telecommunications ![](/assets/company-logos/hsbc.png) HSBC UK Financial Services MARKETPLACE 2 of 4 ### Analyse your market in depth Analyse your market Go beyond basic company details with financial, corporate, geographic and commercial intelligence. Explore financial, company, sector and location insights. [Explore Marketplace](/marketplace/) - Financial performance and trends - Company history and activity - Sector, size and location analysis - Financial performance and trends - Company history and activity - Sector, size and location analysis [Explore Marketplace](/marketplace/) Audience 12,847 OverviewLocationSectorSizeFinancials By location High Low Top regions London **3,184** South East **2,470** North West **1,610** Midlands **1,204** Top sectors Technology **28%** Professional **22%** Manufacturing **15%** Financial **11%** Company size **34%** _1 – 9_ - 1 – 9 **34%** - 10 – 49 **28%** - 50 – 249 **23%** - 250+ **15%** Turnover trend **£5.1M** _+27% YoY_ 20212022202320242025 Audience 12,847 Combined turnover £4.2B By sector By size By turnover Growth PULSE 3 of 4 ### See what is hiding in your data Check your data Upload your records to identify quality issues, missing information and opportunities for improvement. Identify missing, invalid and outdated information in your records. [Explore Pulse](/pulse/) - Data quality checks - Find gaps and outdated details - Uncover new prospect opportunities - Measure record quality - Find gaps and outdated details - Prioritise issues to fix [Explore Pulse](/pulse/) Healthcheck results Analysis complete Score 583 out of 850 Fair Overview Active businesses **89%** Verified records **76%** Validation issues **18%** Data completeness **58%** **9,968** Missing fields **375** Issues found **4,082** Records read **3,184** Matched Top issues found Duplicate records **128** Invalid phone **97** TPS registered **64** Healthcheck results Analysis complete Score 583 out of 850 Top issues found Duplicate records **128** Invalid phone **97** TPS registered **64** Active businesses **89%** Verified records **76%** Validation issues **18%** Data completeness **58%** PULSE 4 of 4 ### Turn incomplete records into useful data Complete your records Add missing company and contact information, then export the fields you need or connect them to your systems. Add missing company and contact data, then export it to your systems. [Explore Pulse](/pulse/) - 350+ available fields - Company and contact enrichment - Integrations to export directly to your CRM - 350+ available fields - Company and contact enrichment - Direct CRM export [Explore Pulse](/pulse/) Your record 8 fields added Company name Ashford Timber Ltd Registration 04482910 Turnover £8.4M Employees 412 Sector Timber merchants Named contact Helen Baker Job title Operations Director Contact email h.baker@ashford.co.uk Telephone 0161 4820 2210 Address Unit 7, Trafford Park, Manchester M17 1AB Send to ![](/assets/logos/excel.webp) ![](/assets/logos/salesforce.png) ![](/assets/logos/hubspot.png) ![](/assets/logos/mailgun.svg) ![](/assets/logos/zapier.png) ![](/assets/logos/mailchimp.png)and more… Your record 8 fields added Company name Ashford Timber Ltd Turnover £8.4M Employees 412 Sector Timber merchants Send to ![](/assets/logos/excel.webp) ![](/assets/logos/salesforce.png) ![](/assets/logos/hubspot.png) and more… 1 of 4 SECURITY REVIEW ## Need information for a security review? We can provide further information about our security controls, data handling, retention, supplier management and contractual protections. [Request security information](mailto:dpo@wren-data.co.uk?subject=Security%20information%20request) UK-hosted · ICO registered · UK GDPR & PECR ### What we can share - Security controls How data is encrypted in transit and at rest, and how access is controlled. - Data handling and retention What we hold, where it is processed and how long it is kept. - Suppliers and subprocessors Who we work with and the contractual protections that apply. - Contracts and agreements Our Data Processing Agreement and the terms that govern each role. Prefer to speak to someone? [Contact our compliance team →](/contact/)