Security overview

Access Compass · accesscompass.uk · last reviewed July 2026

The most secure user data is the data you never hold. Access Compass is built local-first with no accounts and no central user database, which removes whole categories of risk before they can arise. This page explains our approach plainly, for anyone running security due diligence.

Design principles

No central store of user data. Your settings, access profile and saved items live on your device, not on our servers, so there is no database of user information to breach, leak or ransom.
No accounts, no passwords. There is nothing to sign into, so there are no credentials to steal, phish or reuse, and no account-takeover risk.
Encrypted in transit. The app and all its content are served over HTTPS (TLS).
Least data. The app requests only what it needs to deliver the directory, and carries no user identity in those requests.

Hosting and infrastructure

The website is served from Google Firebase Hosting on Google Cloud infrastructure, over an encrypted connection with a global content-delivery network. It holds no user accounts or user-created content.

Application security

The app is a static, client-side Progressive Web App. It has no server-side application logic that stores or processes user records.
Third-party code is kept to a minimum and updated as part of ordinary maintenance.
Changes are verified in the real rendered app before release, including accessibility and behaviour checks.

Data handling

Because your data stays on your device, you hold the controls: you can view, edit and delete everything yourself, and clearing the site's storage removes it entirely. There is no copy on our side to recover or to lose. Full detail is in our data protection statement.

Scope, honestly. Access Compass is an information and signposting directory, not a medical device and not a clinical system. We describe what we do rather than claim certifications we do not hold. Where an organisation needs formal assurance, we are glad to complete security questionnaires and share what we can.

Reporting a security concern

If you believe you have found a security issue in Access Compass, please tell us at admin@adaidigital.co.uk so we can look into it promptly. We welcome responsible disclosure and will work with you in good faith.

All policies · Data protection · Privacy · Back to Access Compass