Enterprise-Grade Security
Your data is protected by industry-leading security measures, certifications, and compliance standards worldwide.
The experience behind the platform
Security is not new to us. We bring more than 26 years in the technology industry, including delivering systems that handled government data under strict security and confidentiality requirements. Those habits carry into Wizard Application: least privilege by default, encryption in transit and at rest, data residency you choose, and controls we can evidence rather than simply claim.
Data Privacy Compliance
Data privacy is fundamental to how we build and operate Wizard Application. We comply with every major data-protection regime our customers operate under, and we extend the same protections to every region we serve. Your data is stored in the United Kingdom by default. On Professional and Enterprise you choose where it lives at signup, and your data, backups, and processing remain there unless you ask us to move it.
Security Certifications
Independent certifications attesting to the strength of our security controls.
Built on AWS
Our platform runs on Amazon Web Services, the same trusted cloud that powers banks, governments, and FTSE 100 companies worldwide. Workspaces are hosted in the United Kingdom, and Professional and Enterprise customers choose where their data is hosted.
- All data encrypted at rest with AES-256 and in transit with TLS 1.3
- Hosted in the United Kingdom or in the location you choose on Professional and Enterprise, with replication across multiple Availability Zones
- Private VPC with AWS WAF, isolated subnets, and DDoS protection via AWS Shield
- Credentials managed through AWS Secrets Manager, isolated from the application runtime
Security Controls
Complete Database Isolation
Unlike many SaaS platforms that store all customers in a shared database, Wizard Application implements true customer isolation. Each customer receives their own completely separate database instance.
Authentication
TOTP-based multi-factor authentication, passwordless login with passkeys (WebAuthn), and Google Workspace or Microsoft Entra single sign-on for Enterprise customers.
Role-Based Access
Granular permissions ensure users only access what they need.
Audit Logging
Complete audit trail of all user actions and data access.
Security questions or concerns?
Our security team is here to help with any questions you have.
Security questions answered
Common questions about how we protect your data.
Customer data is hosted on AWS in the United Kingdom. Professional and Enterprise customers choose where their data is hosted at signup. Wherever it is hosted, it stays there. If you move to Professional later, you can ask us to move your data.
Data at rest is encrypted with AES-256. Data in transit uses TLS 1.3 with perfect forward secrecy. Encryption keys are managed in AWS KMS.
No. Each customer gets their own isolated database, with no shared schema or shared rows. Cross-customer access is impossible by design.
Automated backups run daily with point-in-time recovery and 90-day retention. Backups are encrypted and stored in geographically separate AWS regions.
Yes. We commission independent penetration tests annually, and run continuous vulnerability scanning through Amazon Inspector and threat detection through AWS GuardDuty.
Email support@wizardapplication.com. Security disclosures and documentation requests are triaged within one business day.