Safety beats convenience, every time.
Where a feature could expose someone's location, a perpetrator link or a case detail to the wrong person, the restrictive option is the default. Opening it up takes deliberate configuration and leaves an audit record.
Protections that work without anyone remembering to use them.
Restricted addressesRefuge and client addresses show as "restricted" to anyone without the specific permission, and we test that automatically.
Sensitive fields maskedRevealing a masked field is an explicit action that writes an audit event.
Presentation modeOne switch masks names and addresses across the whole app for meetings and screen sharing.
Evidence the decisionRisk changes, suitability decisions, links and data shares store who, when and why.
Role-based accessWorkers, team leaders, managers, admins and trustees each see only what their role needs.
Quick exitA keyboard shortcut leaves sensitive screens instantly.
Joined up within your service. Lawful between services.
When the same person causing harm appears in more than one case, Safe Circle Pro raises a light-touch flag. The detail sits behind senior manager sign-off.
Within-organisation flag
Needs sign-off and a data-sharing agreement
We never match automatically against another organisation's records. Any cross-organisation check is started by a person, and only once a formal data-sharing agreement is in place.
Isolated, UK-hosted and accessible.
- Each organisation's data is isolated at the database level, with no reads across organisations under any circumstances
- Primary and backup storage in UK regions
- Trustees work in an aggregate-only view that returns no case content at all
- Board and funder figures anonymised, with small numbers suppressed
- No survivor login in version 1, by design: a client-facing account is a safety risk that needs its own design work
- Built to WCAG 2.2 AA, with every status shown by shape and label as well as colour
Questions from your information governance lead?
We are happy to answer questions about hosting, access controls, retention and data protection impact assessments. Send them in writing and we reply within two working days.
Or start a free trial. Real client information needs a signed data processing agreement first.
