Trust Centre
How we earn the trust to test your telephony
Buying security means trusting a supplier with sensitive findings. This is where our commitments live: how we test, how we handle data, how our own systems are secured, and how to report an issue.
Authorised testing only
Active testing runs only against systems you own or are explicitly authorised to test.
Read more →Website security
Strict CSP and security headers, no client-side secrets, responsible disclosure.
Read more →Reporting standard
Evidence-led findings for both leadership and engineers, with retest status.
Read more →Procurement-ready
NDA, scope, authorisation, data-handling and report samples for evaluation.
Read more →
Data handling
How we treat your data
- Data minimisation: we collect only what the assessment needs
- Findings are handled with care and shared only with your authorised contacts
- Retention is time-limited and confirmed in the engagement agreement
- Sample and demonstration material is sanitised, no real customer data
- A mutual NDA is available before any sensitive detail is shared
Infrastructure
How our own systems are run
- This website enforces a strict Content-Security-Policy and security headers
- Transport is encrypted; no secrets are shipped to the browser
- Enquiry data is validated server-side and never falsely reported as sent
- A responsible-disclosure route is published for security researchers
Registered entity
- Legal name
- GoldPaid Ltd
- Companies House
- 17382540
- ICO register
- ZC214216
- Registered office
- Unit 217, Bristol Business Centre, 179 Whiteladies Road, Clifton, Bristol BS8 2AG
GoldAgent is a trading name of GoldPaid Ltd.
Accreditations
We publish certifications only once they are genuinely held. Where you would expect to see accreditations, we would rather show nothing than imply something that is not in place. Ask us about our current status for a specific engagement and we will answer plainly.
Sub-processors & hosting
A current list of the service providers we rely on (for hosting, email and any customer-relationship tooling) is available on request and confirmed in the engagement documentation. We do not list providers we do not actually use.
Evaluating GoldAgent?
Request the procurement pack: NDA, scope, authorisation, data-handling notes and a report sample.
Testing is only performed against systems you own or are explicitly authorised to test.