TalkTerms achieves Cyber Essentials Plus certification

We're delighted to announce that TalkTerms has achieved Cyber Essentials Plus, the highest level of the UK government's flagship cyber security certification.

For a business built around the resolution of claims, complaints and disputes, trust isn't a nice-to-have — it's the foundation everything else rests on. Every case that moves through TalkTerms Swift or TalkTerms Engage carries sensitive information: personal details, financial figures, legal positions and the kind of correspondence people understandably want kept private. Achieving Cyber Essentials Plus is independent confirmation that we protect that information to a standard our clients can rely on.

What Cyber Essentials Plus actually means

Cyber Essentials is a certification scheme backed by the UK government and the National Cyber Security Centre (NCSC). It sets out five technical controls that, properly implemented, guard against the overwhelming majority of common cyber attacks: firewalls, secure system configuration, security update management, user access control and malware protection.

The Plus tier raises the bar considerably. Where the basic certification relies on a verified self-assessment, Cyber Essentials Plus requires an independent, hands-on technical audit by a qualified external assessor. That means real-world testing — vulnerability scans, checks across our devices and systems, and verification that the controls we say are in place genuinely hold up under scrutiny. It's the difference between describing your security and having it independently put to the test.

Why this matters for our clients

TalkTerms works with insurers, law firms, claims negotiators and institutions, alongside the individuals and businesses using our platforms to reach resolution. These are clients who, quite rightly, ask hard questions about how their data is handled before they trust a platform with their cases.

Cyber Essentials Plus gives a clear, recognised answer. It's a certification many organisations now expect — and in some cases require — from their technology suppliers and partners. Holding it removes a barrier, shortens conversations about due diligence, and lets everyone focus on what TalkTerms is actually for: resolving disputes simply, affordably and quickly.

Part of a wider commitment

This certification doesn't sit on its own. Our platforms are end-to-end encrypted and fully GDPR compliant, and security has been designed in from the ground up rather than bolted on afterwards. Cyber Essentials Plus formalises and independently validates that approach, and it gives us a framework to keep raising the standard as both our platforms and the threat landscape evolve.

"Achieving Cyber Essentials Plus is about more than a certificate on the wall — it's a promise to every business that trusts us with their cases. When organisations bring their claims and disputes to TalkTerms, they're sharing commercially sensitive, financial and legal information, and they deserve to know it's protected to the highest standard. This independent verification confirms what our team works hard at every day: that security isn't an afterthought, it's built into how our platforms are designed and run. We see it as a baseline to build on, not a finish line, and we'll keep raising the bar as we grow."

— Gary Lyons, CEO of TalkTerms.

Looking ahead

Cyber security isn't a box you tick once. Maintaining Cyber Essentials Plus means revisiting these controls year on year, keeping systems patched and configurations tight, and treating every new feature as something that has to meet the same standard. That's a commitment we're glad to make.

To our clients, partners and the people choosing TalkTerms to help resolve their disputes: thank you for your trust. We don't take it lightly, and certifications like this are how we prove it.

Want to know more about how TalkTerms keeps your data secure? Get in touch — we're always happy to talk it through.