SECURITY & COMPLIANCE · FOR RISK TEAMS

The page your compliance lead asked for.

How evidence is protected, where data lives, and which regulations each step of the survey is built to satisfy. Mechanisms are described plainly; where an accreditation is in progress rather than held, it says so.

Request the security pack

How the evidence is protected

Four mechanisms, each doing one job. Together they let a pack be checked by someone who has never met the installer.

SHA-256 at capture

Each original is hashed the instant it is taken. Any later change to a single byte is detectable.

On-device signing

A non-exportable key in the secure enclave signs each entry, binding the evidence to that device.

Trusted timestamps

RFC 3161 tokens from an independent authority anchor the ledger to a time no one on the job controls.

Chained hash ledger

Each entry signs over the previous one, so nothing can be removed or reordered without detection.

What each step is built to satisfy

The survey is structured around the UK regulatory regime for commercial EV installs. EV·Surveys captures the evidence and runs the checks; the installer remains the responsible person for the work itself.

REGULATION	WHAT IT COVERS	SURVEY STEP
BS 7671 §722	EV-specific electrical requirements: earthing, open-PEN protection on PME, RCD type, bonding.	STEP 03
PCPR 2023	Public Charge Point Regulations: ad-hoc contactless payment duty for public points rated 8 kW or above.	STEP 05
PART P	Building Regulations for electrical safety: the evidence pack supports the notification record.	STEP 12
PAS 1899	Accessible public charging provision: bay and approach requirements captured with photos.	STEP 09
DNO · G98/G99	Supply capacity and connection evidence the DNO needs to assess and accept the install.	STEPS 02 · 04

EV·Surveys records evidence against these regulations; it does not certify compliance on the installer's behalf. Responsibility for the work and its sign-off remains with the qualified person.

Where data lives

Evidence is created and held on the device first. Backups and the operations view are encrypted and hosted in the UK. Your firm is the controller of survey data; EV·Surveys processes it under a data processing agreement.

Read the privacy policy →

Data residency: UK
Encryption in transit: TLS 1.3
Encryption at rest: AES-256
Signing key location: SECURE ENCLAVE
Access control: SSO · ROLE-BASED

Accreditation status, stated plainly

We describe the mechanism rather than claim a badge we do not hold. Current status:

UK GDPR & DPA 2018COMPLIANT

ISO 27001IN PROGRESS

Cyber EssentialsCERTIFIED

Status shown is illustrative pending your confirmation. Tell us which certifications EV·Surveys actually holds and we will correct this section before launch.

Send the questionnaire. We will answer it.

We will complete your security questionnaire and send a sample evidence pack for your risk team to test against their own tooling.

Request the security pack How it works