Security & Trust

Here's exactly how we handle security today — no inflated claims, no certifications we don't yet hold.

We believe AI in business should be held to a higher security standard, not a lower one. We're currently building out our own internal AI-driven security and compliance process, with the goal of achieving independent certification (such as Cyber Essentials and ISO 27001) as NYAS grows. We haven't reached certification yet, and we won't claim otherwise — but here's exactly how every AI agent we build is handled in the meantime:

What we do today

Honest, specific, and checkable

Human oversight on every agent. No AI agent NYAS builds operates fully unsupervised on sensitive tasks — a human expert in that department reviews how it's working on an ongoing basis.
Data minimisation. Agents are scoped to access only the data they need for their specific task, nothing broader.
No training on your data. Your business data is never used to train third-party AI models.
GDPR-aware by design. Every build is scoped with UK GDPR requirements in mind from day one, not retrofitted after.
Clear data ownership. Your data stays yours. We'll always be clear about which tools and platforms it passes through as part of an agent's workflow.

Where we're headed

Working toward formal certification

We're actively working toward formal security certification for NYAS as a business. When that's achieved, this page will be updated with the certificate and audit details — publicly and verifiably, not just claimed.

Book A Free Working Session