SECURITY & COMPLIANCE

Security and compliance, built into Wren.

Wren combines UK-hosted infrastructure with data protection practices shaped by ICO guidance, giving your team clearer controls when using business data.

See how we build our data View our privacy policy
  • UK-hosted infrastructure
  • ICO registered
  • UK GDPR & PECR

PLATFORM SECURITY

Protected from upload to export

Security controls protect customer and platform data at every stage, from authentication and upload to processing, storage and export.

Explore the platform →

Data protection

Encryption

Stored data is protected using AES-256 encryption, with TLS used to protect data moving between users, services and the platform.

Access control

Role-based permissions, multi-factor authentication and controlled administrative access help limit data access to authorised users.

Monitoring and audit records

System monitoring and audit logging help us detect unusual activity, investigate events and maintain operational oversight.

Resilience and recovery

Automated backups and documented recovery processes support platform availability and the restoration of protected data.

Secure uploads and retention

Uploaded files pass through controlled, access-checked processes and are retained only for defined periods.

Responsible AI

Private, controlled AI

AI-assisted processing runs within controlled services. Customer uploads are not submitted to public AI tools or used to train public models.

UK hosted

Your data stays in the UK

Wren is built, hosted and maintained in the UK. Customer data, processing and primary storage remain within our controlled UK-hosted environment.

ACCOUNTABILITY BY DESIGN

Data protection built into how we work

Our responsibilities, decisions and controls follow the ICO’s accountability and data protection by design principles.

See how we build our data →

Use

Why and how we use data.

Lawful and transparent

We document why data is processed and explain how it is collected, used and shared.

Purpose limitation

Data is used only for defined and appropriate business purposes.

Quality

Keeping data accurate and minimal.

Data minimisation

We limit data to fields with a clear and relevant business use.

Accuracy

Records are maintained through structured validation and update processes.

Governance

Managing data over time.

Retention and deletion

Defined schedules govern customer uploads, account data and operational records.

Demonstrable accountability

Policies, responsibilities and risk assessments document what we do and why.

SECURITY & COMPLIANCE FAQ

Security and compliance questions

Is Wren Data registered with the ICO?

Yes. Wren Data is registered with the Information Commissioner’s Office as a data controller. Registration confirms our inclusion on the ICO’s public register of data protection fee payers. It is not an ICO certification or endorsement.

Is Wren Data hosted in the UK?

Yes. Wren’s primary platform infrastructure, customer data and processing are hosted in the UK.

Does UK GDPR allow B2B marketing?

UK GDPR does not prohibit B2B marketing. Organisations must have an appropriate lawful basis when processing personal data, follow the relevant PECR rules and respect the absolute right to object to direct marketing. The requirements vary according to the recipient and marketing channel.

Does using Wren make a campaign compliant?

Wren provides data, suppression information and platform controls designed to support responsible marketing. Each customer remains responsible for the purpose, targeting, lawful basis and delivery of its campaigns.

Does Wren use customer files to train AI models?

No. Customer uploads are not used to train public or shared AI models. AI-assisted processing takes place through controlled services subject to Wren’s security and data handling requirements.

How long are uploaded files retained?

Uploaded files are retained according to the service being used and the applicable retention schedule. Files uploaded to Pulse are automatically deleted after 30 days. Read our privacy policy

Any other questions? Get in touch

RESPONSIBLE MARKETING

Supporting responsible B2B marketing

UK GDPR and PECR allow responsible business marketing, but the rules depend on the recipient, the information used and the method of contact. Wren provides data and controls that help customers make informed campaign decisions.

Read the ICO’s direct marketing guidance ↗ See how we build our data →

Before using business data

  • Confirm the campaign’s purpose and lawful basis
  • Apply the relevant rules for the recipient and contact channel
  • Check TPS, CTPS and suppression information
  • Clearly identify the sender and provide a simple opt-out
  • Honour objections and maintain suppression records

INFORMATION SECURITY MANAGEMENT

How we manage information security

Wren’s security practices are designed around ISO/IEC 27001 principles, with documented policies, responsibilities and risk-based controls applied across our infrastructure, software, people, suppliers and day-to-day operations to protect the confidentiality, integrity and availability of information.

Risk

Assess and treat risk

We identify information security risks, assess their likelihood and impact, and apply controls according to the sensitivity of the information and the services involved.

Access

Control access

Access is restricted according to role and business need. Administrative access is controlled, reviewed and protected using measures including multi-factor authentication.

Systems

Protect and monitor systems

Encryption, system monitoring, audit records, vulnerability management and controlled change processes help protect the platform and identify unusual activity.

Response

Prepare for incidents

Documented incident-response, backup and recovery procedures support timely investigation, containment and restoration.

Suppliers

Manage suppliers

Suppliers that may process or access information are reviewed according to risk, with appropriate security and data-protection requirements included in our agreements.

Governance

Review and improve

Security controls, risks and working practices are reviewed as our platform, suppliers, data and regulatory obligations change.

Request further security information →

USE WREN DATA

Put our data to work

Build new audiences, understand markets and improve the data you already hold.

Build new audiences or improve the data you already hold.

MARKETPLACE

Build a precise audience Build a precise audience

Combine company, contact, location and specialist criteria to find the businesses and people you need. Find businesses and contacts using 100+ criteria.

Explore Marketplace
  • 100+ search criteria
  • AI and map search
  • Tailored exports
  • 100+ search criteria
  • AI and map search
  • Tailored exports
Explore Marketplace
1 of 4

SECURITY REVIEW

Need information for a security review?

We can provide further information about our security controls, data handling, retention, supplier management and contractual protections.

Request security information

UK-hosted · ICO registered · UK GDPR & PECR

What we can share

  • Security controls

    How data is encrypted in transit and at rest, and how access is controlled.

  • Data handling and retention

    What we hold, where it is processed and how long it is kept.

  • Suppliers and subprocessors

    Who we work with and the contractual protections that apply.

  • Contracts and agreements

    Our Data Processing Agreement and the terms that govern each role.

Prefer to speak to someone?

Contact our compliance team →