SECURITY & DATA PROTECTION

Protect the detail.
Empower your team.

Give your team the tools to act with confidence, with protection built into sign-in, casework and sharing. Beacon helps the right people work together while keeping sensitive information carefully controlled.

Give the right people the right access

Let colleagues do their work while keeping sensitive information within clear boundaries.

Your organisation’s workspace

Keep everyday access to your organisation’s records separate from other organisations. Authorised group views share aggregate oversight.

Access matched to responsibility

Give colleagues the tools and information their work calls for, using roles, locations, departments and case permissions.

A confidential route for staff cases

Restrict sensitive investigations to selected people, with conflict exclusions applied to case records, files, exports and alerts.

Protect the people protecting others

Build an extra layer of protection into access to sensitive work.

Multi-factor protection for key roles

Safeguarding leads, deputies and System Admins must use multi-factor authentication. You can also require it for Named Professionals.

Convenient, protected sign-in

Use passkeys on supported devices while keeping required MFA in place. Passwords and recovery codes are stored as one-way hashes.

Automatic session safeguards

Limit repeated sign-in attempts and automatically end inactive sessions. Changing a password invalidates existing sign-in sessions.

Make mobile working more discreet

Keep staff connected without putting safeguarding details into everyday alerts.

Alerts that protect the detail

Notify eligible leads that something needs attention, with no names, allegations or case details in the push message.

Case information stays behind sign-in

Beacon’s installable app does not keep an offline cache of safeguarding records. Staff sign in online to access their authorised work.

Protection while your team works

Built-in browser and request checks help protect sensitive pages and reject unauthorised form submissions.

Keep a clear record of the response

Bring evidence, decisions and accountability together for the next review.

Evidence with controlled access

Check uploaded file types and sizes, then make files available through permission-controlled downloads.

A record of what was signed

Keep the signer, time and a snapshot of the agreed content together, with a content fingerprint to support later checks.

History that supports accountability

Follow recorded actions and dated case events, helping your team explain the response and revisit earlier decisions.

Share information with purpose

Prepare the right information for the right person, with control over future access.

Review before you share

Build an evidence pack and redact its text copy before disclosure. Choose and separately review any original attachments or visuals.

Verified, time-limited access

Ask the nominated recipient to verify their email with a short-lived code. Set an expiry and revoke future access when needed.

A clearer record of disclosure

See access events, attachment downloads and receipt confirmations for a shared snapshot. Downloaded copies cannot be recalled.

SUPPORTING YOUR GOVERNANCE

Make responsible practice easier to evidence.

Bring the information behind your decisions into one workspace, ready for internal reviews and data-protection conversations.

CLEAR DECISIONS

Keep the reasoning with the record

Capture consent, capacity, information-sharing decisions and the person’s wishes alongside the response, giving reviewers useful context.

VISIBLE FOLLOW-UP

Give governance work an owner

Track data subject requests, compliance reviews and retention decisions with ownership and outcomes. Retention settings support review and holds; they do not automatically delete records.

AN INFORMED CHOICE

Explore what matters to your service

Use your demo to see access controls, confidential cases and sharing in practice. Discuss your data-protection requirements and the service arrangements before deciding.

For further guidance, visit the ICO’s security guidance, lawful basis guidance and DPIA guidance.

CLEAR ANSWERS

Confidence starts with clear answers.

Have a question about your organisation’s needs? Bring it to your demo and explore how Beacon could support your team.

How does Beacon support our data-protection responsibilities?

Beacon brings access controls, signed records, case histories and reviewed sharing into your everyday workflow. These tools support your UK GDPR and Data Protection Act 2018 responsibilities alongside your policies, lawful basis, contracts and working practices. Software alone cannot establish compliance or provide certification.

What should we know about encryption and service arrangements?

HTTPS protects information in transit between the device and Beacon. Encryption of stored databases, files and backups depends on the agreed hosting service. Before using live information, confirm these arrangements alongside data locations, the processing agreement, subprocessors, backups, recovery and incident contacts. Record fingerprints support integrity checks; they do not encrypt the underlying information.

Can staff see every safeguarding case?

You control access through roles, locations and relevant permissions. Confidential staff cases need explicit case access, and selected subjects or excluded accounts are blocked from the case. Your demo can show how these boundaries work for different colleagues.

Can we record sensitive safeguarding information?

Beacon provides controlled records for sensitive safeguarding work. Your organisation still needs an appropriate lawful basis and any additional conditions for the information it processes. Health information generally requires an Article 9 condition as well as an Article 6 lawful basis; criminal allegations have separate Article 10 requirements.

ICO: special category data · ICO: criminal offence data

How does Beacon help protect access from mobile devices?

Beacon checks the active account and permissions when protected information is requested. Sessions expire after 30 minutes of inactivity and a maximum of 12 hours, and password changes invalidate existing sessions. If a device is lost, suspend the account and follow your device-response procedure. Device screen locks and controls for downloaded files remain part of your organisation’s protection.

How are uploaded files and signed records protected?

Uploaded files have type, size and content checks, with downloads controlled by permissions. Signed snapshots and recorded history support later review. Upload checks are not antivirus scanning, and record fingerprints are not an independent tamper-proof audit service.

How do notifications support our response?

Reports, tasks and optional notifications help your colleagues see what needs attention. Beacon supports your team’s response; it does not provide an emergency monitoring service. Urgent concerns still need your established emergency and escalation procedures.

SEE BEACON WORK FOR YOUR TEAM

Bring your questions. See the safeguards.

Book your demo ↗