WeHub is certified to Cyber Essentials and Cyber Essentials Plus Drag
Both certificates were awarded on 17/12/2025 through IASME, with whole organisation scope.
WeHub holds both Cyber Essentials and Cyber Essentials Plus. Both certificates were issued by IASME on 17/12/2025 and cover the whole organisation.
Cyber Essentials is the UK government backed scheme that sets out five technical controls every organisation should have in place:
- Firewalls and internet gateways
- Secure configuration
- User access control
- Malware protection
- Security update management
The base certificate is awarded on a verified self assessment. The Plus certificate goes further, with an independent assessor testing those same controls against a sample of live devices and cloud services before certification is granted.
For our customers, the practical meaning is that the controls protecting your data have been examined by someone outside WeHub and found to be working. Because the scope is the whole organisation rather than a single system, that applies across Studio, Term, Records and Proof, and to Runner, Managed and Self Hosted deployments alike.
It also removes a familiar delay. Cyber Essentials Plus is one of the first things asked for in supplier assurance questionnaires, DPIA reviews and procurement packs, and a current certificate answers that request directly. Teams working with us can attach the certificate and the scope statement to their submission rather than gathering assurances and waiting for them to be reviewed.
The certification sits alongside the rest of our security position: UK data residency in UK South, per customer tenant isolation, and a written DPA under which WeHub acts as data processor in line with UK GDPR and the Data Protection Act 2018.
The bottom line
The certificate and scope statement are available on request. Ask your WeHub lead and we will send them the same day.