Built on a foundation of trust
When organisations and individuals trust AXS Passport with accessibility data, that responsibility has to be taken seriously. Security, privacy, ethical AI governance and clear compliance practices are built into how the platform is designed and managed.
What Our Allies Say
Trusted by inclusion leaders across the UK
“At Neurodiversity in Business, we're always looking for innovative ways to support and celebrate neurodiversity in the workplace. The AXS Passport has been a game-changer for our events, providing a practical tool that enables individuals to share their needs and thrive authentically. The positive feedback we've received from attendees and partner organisations has been incredible. We're proud to support the AXS Passport and look forward to continuing our partnership to create truly inclusive environments.”
“At Disability Rights UK, our mission is rooted in enabling disabled people to live independently and participate fully in society. 'Calling All Minds' AXS Passport is a powerful step in that direction. It gives individuals a voice in identifying and communicating the barriers they face, without needing to rely on labels or clinical diagnoses. That matters. Because real inclusion isn't just about compliance, it's about dignity, choice, and creating environments where people feel seen and supported. We're proud to stand behind this inclusion initiative and look forward to seeing it help reshape workplace culture across the UK and beyond.”
“At Working Futures, we bring together Chief HR Officers and industry leaders to explore the evolving landscape of Work, People, Culture and Performance. A significant aspect of this looks at workplace inclusion. Having Atif speak at our events has always been a highlight, and introducing the AXS Passport to our network has been a transformative step. This tool empowers HR decision-makers to better understand and address the unique barriers faced by neurodiverse employees, fostering a more inclusive and proactive workplace culture. The AXS Passport doesn't just focus on labels; it sheds light on the real-world challenges and helps HR teams anticipate and address needs effectively. We're thrilled to be part of this journey toward a future-ready workplace.”
“As someone deeply committed to fostering inclusive workplaces, I've seen firsthand how challenging it can be for individuals to share their realities, especially when they are not defined by labels. AXS Passport by the 'Calling all Minds' team is a game-changer for the HR sector. It embodies anticipatory thinking by empowering organisations to support all employees, regardless of how they identify. This innovative tool ensures everyone can access the support they need, creating a more compassionate and equitable workplace for all.”
Enterprise-grade security
AXS Passport is built on enterprise-grade infrastructure with security controls at every layer.
SOC 2 Type II certified infrastructure
Hosted on Vercel and Neon — both independently SOC 2 Type II certified providers — deployed to UK regions.
Encryption in transit and at rest
All data is encrypted in transit (TLS 1.3) and at rest (AES-256). No exceptions.
Role-based access control
Granular permissions ensure users only see what they need to see. No over-provisioning.
External security review
External security reviews are conducted as part of our ongoing security programme, including API surface audits and vulnerability assessments.
Data residency
Application infrastructure, database, and file storage are all deployed to UK regions (London). No personal data leaves the UK as part of normal platform operation. This is reflected in our ROPA and processor agreements.
Incident response
Documented incident response procedures with defined SLAs and communication protocols.
Regulatory alignment
AXS Passport is designed to help organisations meet their legal obligations under UK accessibility and employment legislation.
Equality Act 2010
Built to support reasonable adjustment obligations under the Equality Act.
EHRC Guidance
Aligned with Equality and Human Rights Commission best practice guidance.
UK GDPR
Designed to support UK GDPR compliance, with appropriate controls for handling personal and special category data.
Data Protection Act 2018
Processing of special category data handled in accordance with DPA 2018.
WCAG 2.2 AA
Designed and tested against WCAG 2.2 AA accessibility standards.
ISO 27001 informed
Information security management practices are informed by ISO 27001 principles, with formal certification on our roadmap.
Ethical AI governance
Rosa, our AI assistant, is designed with strict ethical boundaries. We believe AI should support human decision-making, not replace it.
AI augments human expertise. It never replaces it.
No decision-making
Rosa provides guidance and information. She never makes decisions about adjustments, eligibility, or outcomes.
Data boundaries
Rosa is designed to operate with clear data boundaries and only access the information required for the interaction or workflow being supported.
Transparent operation
Users always know when they are interacting with AI. There is no attempt to disguise Rosa as human.
Quality review
We review Rosa's responses as part of our ongoing quality process to identify and address potential issues in guidance.
Human override
Every AI-assisted process includes a human review step. AI augments, it does not replace.
Accountable design
Documentation of AI capabilities, limitations, and governance framework is available on request.
FAQs
Find answers to common questions about AXS Passport.
AXS Passport uses enterprise-grade security including encryption at rest and in transit, role-based access controls, and fully UK-based infrastructure. Application, database, and file storage are all deployed to UK regions (London). No personal data leaves the UK as part of normal platform operation, as documented in our ROPA and processor agreements.
Yes. AXS Passport is designed to support UK GDPR compliance, with appropriate controls for handling personal and special category data in accordance with UK data protection legislation.
Rosa is designed to operate with clear data boundaries. She only accesses the specific information required to support the current interaction or workflow and does not use personal data for training purposes.
Access is controlled through granular role-based permissions. Only authorised individuals with a legitimate need to support an adjustment or access request can view the relevant information.
Yes. AXS Passport is designed and tested against WCAG 2.2 AA accessibility standards to ensure it is usable by everyone, including those using assistive technology.
Questions about security or compliance?
Our team is happy to walk through our security practices, compliance certifications, and governance framework in detail.