Company Policies and Statements

Modified on Wed, 28 Jan at 4:33 PM

Background

Please find below links to a range of the published policy statements and standards for Personal Audit System Ltd (PAS Ltd). If you are looking for more specific details on our SaaS/Hosted offering (data centres etc), then please also refer to our Hosted/SaaS Security Questions and Technical Policies page.

Policy documents and articles are usually reviewed during an annual process in January although articles are updated as and when changes are made.


Risk Ledger

To ease the qualification of the suitability of Personal Audit Systems Ltd to meet your requirements, we contribute to Risk Ledger, which is is a collaborative platform for supplier due diligence that helps organisations simplify, visualise, and mitigate supply chain security risk. We would encourage you to review all the data on this page and available from our Risk Ledger profile before sending questionnaires - you should find everything you need. Click on this link to access the public view of the assessment.


General Company Policies

Document/PolicyPublication Date/Expiry Date
Acceptable Use Policy27/01/2026
Access Management Policy27/01/2026
Anti-Bribery Policy27/01/2026
Anti-Money Laundering Policy27/01/2026
Asset Management Policy27/01/2026
Backup Policy27/01/2026
Bring Your Own Device (BYOD) Policy27/01/2026
Business Continuity Plan23/01/2026
Business Code of Behaviour27/01/2026
Change Management Policy27/01/2026
Clean Desk Policy
27/01/2026
Computer Use27/01/2026
Confidentiality and Non-Disclosure27/01/2026
Configuration/Hardening Policy27/01/2026
Cyber Essentials Certificate23/01/2026 - 22/01/2027
Data Classification Policy27/01/2026
Data Handling Policy27/01/2026
Disposal of Sensitive Data28/01/2026
Environmental Policy28/01/2026
Equal Opportunities28/01/2026
Equality, Diversity and Inclusion Policy
28/01/2026
Health & Safety Policy28/01/2026
HR Security Policy28/01/2026
Incident Handling and Data Breach28/01/2026
Information Asset Register (IAR)28/01/2026
Information Commission Officer (ICO) Certificate22/02/2010 - 22/02/2026
Information Security Policy28/01/2026
Leaver Checklist28/01/2026
Modern Slavery Act Statement28/01/2026
New Starter Checklist28/01/2026
Penetration Test Summary28/01/2026
Physical Security Policy28/01/2026
Quality Policy28/01/2026
Record of Processing Activities (RoPA)28/01/2026
Risk Management Policy28/01/2026
Software Development Life Cycle28/01/2026
Software Risk Assessment28/01/2026
Software Update and Patch Management28/01/2026
Whistleblowing28/01/2026
Wireless Security Policy28/01/2026


GDPR Data Sharing Details

Data Sharing DocumentDate Issued
Data Sharing for the locally installed (onsite) P11D Organiser17/05/2018
Data sharing for the SaaS/Hosted P11D Organiser17/05/2018


Support SLAs

PriorityResponse Within
Urgent1-4 Hrs
High4-8 Hrs
Medium1-5 Days
Low2-30 Days


Development Standards

Document/PolicyPublication/Review Date
Software Development Life Cycle03/12/2021
Secure Coding Best Practice01/02/2021
C# Coding Standards05/03/2015
VFP Coding Standards05/03/2015


PAS Bank Details

DocumentReview Date
Bank Details/Invoicing Details21/01/2022
Bank Details/Invoicing Details (PDF)08/07/2021


Terms & Conditions

DocumentReview Date
T&Cs for the onsite P11D Organiser06/12/2021
T&Cs for the hosted/SaaS P11D Organiser06/12/2021


Insurance Policies

Details of the insurance policies that PAS Ltd hold can be found here.


Was this article helpful?

That’s Great!

Thank you for your feedback

Sorry! We couldn't be helpful

Thank you for your feedback

Let us know how can we improve this article!

Select at least one of the reasons
CAPTCHA verification is required.

Feedback sent

We appreciate your effort and will try to fix the article