1. Security Architecture Overview
ReguLex operates a defence-in-depth security perimeter engineered specifically to meet the risk governance standards of top-tier UK chartered accounting practices. Every packet, database transaction, and document generation pipeline is isolated within dedicated infrastructure with zero shared memory exposure.
2. Encryption in Transit & at Rest
- In Transit: All HTTP traffic is secured via TLS 1.3 with Perfect Forward Secrecy (PFS), enforced by HTTP Strict Transport Security (HSTS) with preloading. All inbound connections terminate on Cloudflare’s London (LHR) sovereign edge.
- At Rest: Internal practice cluster databases and cache tables are encrypted using AES-256 GCM. Sensitive practice API keys and officer biometric IDV audit records are hashed using bcrypt with salt rounds adhering to NCSC guidelines.
3. Dedicated Droplet Isolation
Unlike multitenant multi-app shared hosts, ReguLex runs on a dedicated London cloud instance (134.122.100.11) hosted in DigitalOcean’s lon1 facility. This dedicated environment guarantees:
- Zero memory leaking or cross-tenant cache contamination.
- Deterministic sub-50ms statutory processing latencies.
- Strict kernel-level firewall enforcement (UFW) permitting only encrypted ports 22, 80, and 443.
4. Vulnerability Management & Incident Response
Automated dependency audits, static application security testing (SAST), and runtime anomaly monitoring run continuously across our CI/CD pipelines. Security incident disclosures should be submitted immediately to [email protected] for priority triaging within four (4) business hours.