Security notice
Report security issues to team@injectgroup.com or the contact form. Do not include other people’s personal data unless it is required to show the issue.
What we can show today
We state certified, in progress, designed-to, or not in scope. We do not present those programmes as live certificates.
| Control | Status | Evidence / scope |
|---|---|---|
| Cyber Essentials | Certified | UK NCSC scheme. Public record: Blockmarktech certificate (IASME). Scope: Inject Group Ltd, United Kingdom. Issue and expiry dates are on that registry record — we do not restate them here so a renewal cannot drift from this page. |
| Cyber Essentials Plus | In progress | Not claimed as certified. |
| ISO/IEC 27001 | In progress | Information-security programme under implementation. Architecture is designed to those controls. Not certified. No auditor letter is published until a certificate exists. |
| ISO 22301 | In progress | Business-continuity programme under implementation. Not certified. |
| UK GDPR / DPA 2018 | In force (this website) | Inject Group Ltd is controller for website enquiries. See Privacy. |
| Nigeria NDPR / NDPA 2023 | Designed-to (deployments) | This website is not an NDPR-certified processing platform. Supervisory data in a Nigerian licence would be processed in-country by the named SI under a data-processing agreement. Not a claim of NDPR certification. |
| PCI DSS | Not in scope | injectgroup.com does not process cardholder data. A card environment, if ever required, would be assessed per deployment — we do not claim PCI DSS alignment here. |
How this website is run
injectgroup.com is our public website. Messages from the contact form are emailed to our team. We keep a short record of your name, email, which page you wrote from, and the time — not the message body in that list.
How to report an issue
Please give us a reasonable window to investigate before public disclosure. We will acknowledge mail to team@injectgroup.com. A machine-readable contact file is at /.well-known/security.txt.