Plain-English answers to what buyers ask us most — ownership, your data, security and how a build runs. We're an early-stage business: where something is on the roadmap we say so. Our products are structured to match the relevant standards — a head start, not a guarantee — and we're not a legal or compliance authority.
You do. It's built for you and it's yours to keep. If you ever want to take it fully in-house, there's a self-hosted licensed-file option so nothing is tied to us.
Support is available 24/7, included in your plan. Email support@intelligentdashboards.co.uk, phone or message us on WhatsApp at any time, day or night, and you will be dealing with the people who built the product. Small changes after go-live are included rather than billed.
How quickly we respond. We prioritise by impact, and these are our response targets:
These are response targets, not guarantees, and there is no formal service level unless your Order Form sets one. Sales enquiries received before 15:00 get a reply the same working day.
It starts with a free discovery call to map your data and the decisions it needs to support. From there a typical build runs a few weeks to handover, depending on how many sites and sources are involved.
That's the norm, not the exception. Cleaning, reconciliation, duplicate sites, credits against debits and legacy exclusions are all part of the build — handled once in a repeatable import routine.
Yes — that's the self-manage hosting tier. You load the data on your own schedule, and you can hand it back to us to manage whenever it suits.
Not for the record-keeping side. FinanceIQ keeps your Money Laundering Regulations 2017 client due-diligence register — risk rating, ID/KYC status, beneficial owners and review dates — built in alongside the deadlines, so it's one system rather than a standalone AML subscription on top. It's the record-keeping framework, not a PEP/sanctions data provider, and it doesn't submit SARs — those stay with you.
It depends on the mode, and every product page states which applies. Local mode (the default): the dashboard runs in your browser and the data stays on your device — nothing is sent to us. Hosted team mode: your team's data sits in a UK database in London (Supabase on AWS eu-west-2), separated from other customers by row-level security; TradeIQ, InvoiceIQ, HRIQ, AssetIQ, AssureIQ, CareIQ, InspectIQ and SecureIQ offer it, and the iPhone and Android apps sync to the same place. DiaryIQ works the same way: every customer is its own team on that one London database, not a separate database. FinanceIQ and WasteIQ are local-only today. The full table, with sub-processors, is on the Security & trust page.
In the default local mode, only you — it never leaves your device. Where the optional hosted team mode is enabled, access is limited to the people you invite, with role-based permissions designed to be enforced by the database, not just the app.
In local mode, no — it's on your device and we have no access to it. In hosted team mode, your records are held in London and walled off from other customers by the database itself (row-level security). We only access them to give support you've asked for, and we never use them for analytics, training or marketing. There are no third-party trackers in the dashboards by default.
Our products are structured to support UK GDPR — local-first by default (so often no personal data reaches us at all), and the optional hosted team mode is designed around UK data residency, role-based access, an audit trail and "you own your data". For any hosted data we act as your processor, with you as the controller, and we'll sign a Data Processing Agreement. We're honest that "GDPR compliant" is something you achieve as the controller — we give you a strong head start, not a guarantee.
Yes — in local mode your data sits in your browser on your device and is as secure as that device (e.g. if you use disk encryption). Where the optional hosted team mode is used, data is encrypted in transit over HTTPS/TLS and at rest via the platform's database encryption.
The optional hosted team mode is designed with an append-only audit log — entries can be added and read but not edited or deleted, so the trail is tamper-evident. We'll confirm availability for your specific product.
Not in the dashboards — there are no embedded third-party trackers or analytics, and we never use your data for analytics, training or marketing. Our sub-processors are few and named: Supabase (database and authentication, AWS London) for hosted mode, Cloudflare (delivery of the website and apps), Resend (the reminder and notification emails the apps send), Anthropic (only for the optional “Draft with AI” button, ToolboxIQ’s opt-in AI safety insights and reading PDF bills in hosted ESDH), and Apple and Google for distributing the native apps. This website uses Cloudflare's cookieless analytics only. The list is kept current on the Security & trust page.
Here's the full list. Signed up today: we're on the ICO's public data-protection register (registration ZC255636 — verifiable on the ICO website), and we work to UK GDPR, acting as your processor with a Data Processing Agreement for any hosted data. Intelligent Dashboards Ltd is Cyber Essentials certified (the basic, verified self-assessment level — not Cyber Essentials Plus). The certificate was issued by IASME on 5 October 2026 and is valid until 5 October 2027; it covers our own company IT, not the software products themselves, and IASME cyber liability insurance is included with it. Day to day we run multi-factor authentication on every admin and supplier account, encryption in transit (HTTPS/TLS) and at rest for hosted data, and UK (London) data residency. Not held: Cyber Essentials Plus, ISO 27001 (our programme is under way, but we are not certified) and the NHS DSPT. If it's not named here, we don't hold it.
Cyber Essentials: yes. Intelligent Dashboards Ltd is Cyber Essentials certified (basic level, verified self-assessment; certificate issued by IASME on 5 October 2026, valid until 5 October 2027). It covers our own company IT, not the software products themselves, and it is not Cyber Essentials Plus. The certificate comes with IASME cyber liability insurance, which we hold (arranged through the insurance broker Sutcliffe); that is cyber cover only, not professional indemnity or public liability, and the policy terms apply. The NHS DSPT: not yet — it is next on the roadmap for NHS and social-care buyers, and we won't claim it until we hold it. We're also on the ICO register (ZC255636). We're happy to talk you through exactly where we are.
Because our apps are local-first by default, they often don't need to send any personal or patient data to us at all. Where the optional hosted team mode is used, it's designed to keep data in a UK tenancy with role-based access and an audit log. We don't position our tools as clinical systems, and for NHS use the relevant assurance route is the DSPT, which is on our roadmap. We'll support your DPIA with the information you need.
In effect, yes for the data: in default mode everything runs locally in your browser with no server. The optional hosted team mode runs on our shared UK platform (Supabase in London), with your records walled off from other customers by row-level security, and you can export everything at any time. Where a product supports it, you can connect your own Supabase project instead, so the data sits in an account only you control.
Not on ready-made apps — they are monthly rolling and you can cancel for the end of any billing period. Bespoke and managed builds run on a three-year term with the first year payable in advance (see pricing), with your rate locked for that term; within it you can add seats or sites, export your data in full at any time, and switch between managing the data yourself and having us manage it.
A one-off implementation fee sized to your business, then month-to-month hosting (self-manage or fully managed). Your exact tier depends on the number of sites and whether you or we keep the data current — you get a firm fixed quote on a free scoping call before you commit. See the pricing page for the bands.
Hosted data lives in London (Supabase on AWS eu-west-2), encrypted in transit and at rest, behind multi-factor authentication on every admin account and row-level security in the database. We are on the ICO register (ZC255636) and sign a DPA with every hosted plan; we are Cyber Essentials certified (IASME, valid to 5 October 2027; this covers our own company IT, not the products themselves), and the NHS DSPT is next on the roadmap and not yet held. Everything is set out on the Security & trust page, and the reporting standards each product is built to are on the standards breakdown.
Happy to provide a completed security questionnaire, a DPA, or information to support your DPIA. Email support@intelligentdashboards.co.uk and we'll come straight back.
Book a free scoping call — we'll answer it and confirm implementation and hosting once we've seen your data.