At Uhubs, information security and data governance are foundational to our operations. We are committed to protecting customer data, ensuring compliance with industry standards, and fostering transparency. Our policies are structured in alignment with the Cloud Security Alliance (CSA) Consensus Assessments Initiative Questionnaire (CAIQ) v4.0.3 and the SOC 2 standard, emphasising robust controls across audit, risk management, data protection, and operational resilience. While we are not yet SOC 2 certified, our practices are designed to meet SOC 2 criteria, including regular risk assessments, incident response, and third-party vendor evaluations. We store minimal personal data using techniques like encryption, anonymisation, and data minimisation to mitigate risks. Our Data Protection Officer (DPO), Matt Milligan, oversees compliance, and policies are reviewed annually to adapt to evolving threats. This overview summarises our key controls, with the full Uhubs Trust Center attached as evidence.