Trust

Security and compliance

Cirros is built and hosted in the UK, independently certified and designed to NCSC principles. Our ISMS documentation is available on request.

Request our security documentation

Certifications and assurance

ISO/IEC 27001:2022
ISO 27017
ISO 27018
ISO 9001
ISO 14001
Cyber Essentials Plus
Carbon Neutral (Carbon Neutral Britain)
GovAssure CAF Enhanced Profile
NCSC 14 Cloud Security Principles
NCSC Secure Design Principles
UK GDPR and the Data Protection Act 2018
PCI DSS for payments, through Nayax

How we protect your data

UK data residency

Microsoft Azure UK South, with disaster recovery in UK West. All data stays in the UK.

Encryption

AES-256 encryption at rest. TLS 1.2 and 1.3 in transit. HMAC-signed communication between devices and the cloud.

Zero-knowledge job storage

Print jobs are stored so that only the user who sent them can release them, and are deleted after three days at most.

Sign-in and access

Multi-factor authentication by email for every user. Role-based access controls what each administrator can see and do.

Monitoring and testing

Monitored with Microsoft Sentinel, with detections mapped to MITRE ATT&CK. Annual CREST penetration test, with a summary available under NDA.

People

UK-based staff, all cleared to BPSS as a minimum.

Device certificates

Certman issues, renews and revokes each device's certificate through a cloud Certificate Authority, and keeps its trusted root store current. Read about Certman.

Windows Protected Print

Cirros supports Windows Protected Print as standard, so you can block third-party printer drivers across your Windows estate and keep printing. Read what it means for your printing.

Resilience

Immutable, geo-redundant backups
Recovery time objective 4 hours. Recovery point objective 1 hour
99.9% availability on the Cirros public cloud. 99.96% on the GovPrint cloud

Reporting a vulnerability

See our vulnerability disclosure policy or email security@cirros.net.

Certman: certificates handled on every device

Certman automatically issues, renews and revokes device certificates and keeps each device's trusted root store current, across every printer brand.

Windows Protected Print: is your printing ready?

Microsoft is phasing out third-party printer drivers on Windows 11. Cirros supports Windows Protected Print as standard, so you can switch it on and keep printing.

Cyber Essentials Plus renewed

As a provider of cloud-based SaaS managed print solutions, this achievement underscores our commitment to maintaining the highest cybersecurity standards for our clients’ sensitive data and print environments.