A message from our CEO
At Sponsorworks, the security of our customers’ data is fundamental to everything we do. As a company trusted by leading brands to manage their corporate hospitality and events, we recognise that this trust must be earned and maintained through rigorous, demonstrable security practices.
I am personally committed to ensuring that Sponsorworks maintains the highest standards of information security across our organisation, our platform, and our operations. This commitment is shared across our leadership team and embedded in our company culture.
Our security objectives
Sponsorworks maintains a comprehensive Information Security Management System (ISMS) designed to protect the confidentiality, integrity, and availability of the data entrusted to us.
Our core security objectives are to ensure that customer and business data is accessible only to authorised individuals, that data remains accurate, complete, and protected from unauthorised modification, and that our platform and services are reliably available when our customers need them.
To achieve these objectives, we employ a layered approach to security encompassing:
- Robust access controls
- Encryption of data in transit and at rest
- Continuous monitoring and logging
- Regular vulnerability assessments and penetration testing
- A tested incident response process
Our platform is hosted with leading cloud providers, leveraging enterprise-grade infrastructure and protection with geographic redundancy across global regions.
Compliance and regulatory commitment
Sponsorworks is ISO 27001 certified and is pursuing SOC 2 Type II compliance. We are committed to meeting all applicable legal, regulatory, and contractual security requirements, including our obligations under the UK GDPR and the Data Protection Act 2018.
We maintain a register of applicable requirements and regularly review our controls to ensure ongoing compliance. Where we engage third-party suppliers, we hold them to equivalent security standards through our vendor management programme.
Continual improvement
Information security is not a static achievement. We are committed to the continual review and improvement of our ISMS through:
- Regular internal audits and management reviews
- Ongoing risk assessment and treatment
- Learning from security incidents and near-misses
- Adapting our controls in response to evolving threats and business changes
Our security policies and practices are reviewed at planned intervals and whenever significant changes occur, ensuring they remain effective and aligned with our business objectives.
Contact
If you have questions about our security practices or wish to report a security concern, please contact us at hello@sponsorworks.co.
Alex Cowell
CEO, Sponsorworks
Need our security documentation?
Customers and prospects under NDA can request copies of our policies, certifications, and due-diligence pack. Email hello@sponsorworks.co.