Security and continuity
Secure, compliant
and never locked in.
Certified EU cloud, isolated tenants and a full audit trail keep your book secure. Exportable data, source code in escrow and a ready continuity plan keep it yours. This page explains how we work and what is guaranteed.
- Certification
- ISO 27001 in progress
- Hosting
- Certified cloud, EU data residency
- Source code
- Deposited with an independent escrow agent
- Your data
- Exportable by you, any time
How we work
Digital-first,
fully remote.
Soldek works fully remote. We have no office network, no servers of our own and no physical files. Everything runs in certified cloud environments and everything is digital.
That is a deliberate choice. There is nothing in a cupboard that can be lost, stolen or flooded, and every access to a system is an authenticated, logged event rather than a key to a room.
Secured systems
Certified infrastructure,
isolated tenants.
The platform runs on certified cloud infrastructure in the EU, and Soldek's ISO 27001 certification is in progress. On top of that, the platform itself enforces isolation, access control and traceability.
EU data residency
Database and files live in the EU. Transfers outside it only happen under recognised frameworks, as set out in our privacy statement.
Tenant isolation
Every MGA is its own tenant. Row-level security in the database means one tenant's data is never readable from another's session.
Encryption
Encrypted in transit and at rest. Signed links for customer-facing quote pages, secrets kept out of the application code.
Roles, permissions, MFA
Admin, underwriter, broker and client roles with per-permission profiles; multi-factor authentication for every user.
Full audit trail
Every quote, bind, endorsement, claim and settings change is recorded with who did it and when.
Scoped API access
Client API keys are per tenant, hashed at rest, rate-limited and revocable from your own settings.
AI without training on your data
The assistant only proposes configuration your team applies. Prompts go once to a model endpoint under terms that exclude training on customer data; the platform stores and logs neither prompts nor responses.
Your own address
Each MGA has its own address on the platform and can connect its own domain after DNS verification. A session for one tenant is never valid on another tenant's host.
Source code escrow
The code is secured
with an independent agent.
As part of the agreement, our source code is deposited with an independent escrow agent. If something happens to Soldek, the code is released to you. Not to a liquidator, not to a competitor.
Soldek
Deposits the source code and keeps it current
Every release is mirrored to the deposit.
Escrow agent
Independent third party holds it
Releases only on the trigger in the agreement.
Your company
Receives code and transfer instructions
Together with the written continuity plan.
Continuity plan
A plan that is ready,
not a promise.
The continuity plan describes exactly what happens if Soldek can no longer support the platform: who is informed, what is released and how you keep writing business.
- 1
Soldek can no longer support the platform
The trigger defined in the agreement. Nothing else in the plan depends on goodwill.
- 2
The plan activates
You are informed immediately and the continuity plan starts.
- 3
The escrow agent releases
Source code and transfer instructions are released to you, not to a liquidator or a competitor.
- 4
You continue
Your platform and data keep running, on our environment or your own, without interruption.
Transfer to your own systems
Standard technology,
any team can take it over.
Ready-made, step-by-step instructions explain how to move the platform and the data to your own systems. The platform runs on standard, widely used technology, so any development team can host and maintain it.
Soldek environment
Platform and data as they run today
Transfer guide
Step-by-step, written for your engineers
Your own systems
Same platform, same data, your hosting
Your data
Always exportable.
No need to ask us.
You can export all your data yourself at any time: policies, claims, bordereaux, invoices and the structured answers behind every quote. No lock-in, no ticket, no exit fees.
- CSV
- Every table, ready for a spreadsheet or a data warehouse.
- Excel
- Bordereaux and statements in the format your capacity provider expects.
- API
- Stream the same records into your own stack as they change.
In short
Secure by design, compliant by default, and yours to take anywhere.
- Where it runs
- Certified cloud infrastructure in the EU. No office servers, no local files.
- Who can see it
- Only your tenant. Isolation is enforced in the database, not just the interface.
- If we stop
- The source code is released from escrow and a written plan takes you through the transfer.
- Your data
- Exportable by you, any time, in CSV, Excel or via the API. No exit fees.
- Certification
- ISO 27001 certification in progress.
Questions, or need the signed document for your own due diligence? Ask us.
See also the terms and cookie statement.