UK data residency
Customer record storage is hosted on AWS infrastructure in the London region (eu-west-2). Azure AI and document processing are configured primarily in the UK South region.
Security at GoPothos
Built for sensitive
legal and medical data.
GoPothos uses UK-hosted infrastructure, encryption and contractual data controls to protect the records your firm processes. We provide a DPA and security information before client records are uploaded.
UKPrimary data residency
AES-256Encryption at rest
TLS 1.3Encryption in transit
ZC094141ICO registration
Core controls
How your data is protected
Encryption
Records are encrypted at rest using AES-256 and protected in transit using TLS 1.3.
No AI model training
Your data is never used to train, fine-tune or improve AI models. Our provider arrangements are configured for zero retention where that option is available.
Controlled retention
Client-uploaded records are deleted or returned in line with the retention window agreed in the customer agreement and Data Processing Agreement.
Data Processing Agreement
GoPothos acts as a Data Processor for case documents. A formal DPA sets out responsibilities, processing instructions, retention and deletion before records are processed.
Subprocessor transparency
Our privacy notice identifies the providers used for hosting, document processing, communications and billing, together with relevant international-transfer safeguards.
Governance
Clear roles and documented processing
Your firm remains the Data Controller for client records. GoPothos processes those records only on your instructions under the DPA.
Osman Corporation Limited is registered with the Information Commissioner's Office under reference ZC094141. ICO registration is one part of our data-protection framework; it is not presented as certification of compliance by itself.
Read our privacy noticeSecurity review