Trust centre
Procurement and trust
Everything a commissioner needs for early due diligence, in one place. Each item states what we publish and what is available on request.
Trust centre
| Area | What we provide | Status | Link |
|---|---|---|---|
| Legal | Registered name Young Futures Digital Limited, registered in England and Wales. Registered office 124-128 City Road, London EC1V 2NX. Company number and VAT status confirmed in writing during supplier onboarding. | Published; number and VAT status on request | Company details |
| Insurance | Professional indemnity, public liability and cyber cover: certificates for cover held are provided on request, and we confirm in writing the cover in place for each contract before it starts. | On request | Email us |
| Safeguarding | Policy, named lead, concern route, training expectations and incident handling. The named lead is confirmed to each partner at engagement start. | Published | Safeguarding policy |
| Privacy | Privacy notices for adults and for young people, retention approach, subprocessors for any live service, and DPIA support. Data protection fee registration status is confirmed during onboarding. | Published; DPIA input per project | Privacy notices |
| Security | Secure development lifecycle, dependency review, least-privilege access, multi-factor authentication on company systems, backups and a vulnerability reporting route. Where a contract requires Cyber Essentials or similar, we state our current position in writing before award. | Summary published; detail on request | Security summary |
| Hosting and data location | Hosting provider, data location, subprocessors and retention periods are set out for each live service in the DPIA and the contract before any data is processed. | In every DPIA and contract | Privacy notice |
| Automation and AI | No automated decisions are made about individuals. Any automation or AI used in a product is disclosed, reviewed by a person and covered in the DPIA. | Published | Ethical data principles |
| Participant payment | Paid roles for substantial contributions, with rates, method and timing agreed in writing before sessions begin. No unpaid work experience dressed up as participation. | Published | How we pay for co-design |
| Accessibility | WCAG 2.2 AA target, testing method (automated, keyboard, screen reader, zoom, people with access needs), known issues and statement. | Published | Accessibility statement |
| Responsible data | Purpose, minimisation, provenance, limitations, community feedback and a commitment never to sell personal data. | Published | Ethical data principles |
| Equality | Inclusive design, paid participation and reasonable adjustments for participants, partners and staff. | Published | Equality and inclusion |
| Climate and environment | Net zero by 2050 and half by 2030, low-carbon software standard, renewable hosting, data minimisation, low-carbon travel and annual progress reporting. | Published | Climate and environment |
| Commercial | IP position, licence terms, support terms, exit plan and supplier onboarding information, provided with every proposal. | On request; in every proposal | Commercial summary |
| Complaints | Accessible complaint, safeguarding and data-concern routes with response times. | Published | Complaints and concerns |
Security summary
We follow a secure development lifecycle: dependency scanning, code review, least-privilege access, multi-factor authentication on company accounts, encrypted transit, backups and rollback for anything we host. Vulnerabilities can be reported to hello@youngfuturesdigital.co.uk; we acknowledge within three working days and agree a fix and disclosure timeline.
This website sets no cookies, runs no analytics and loads no advertising trackers. Web fonts are loaded from Fontshare and Google Fonts; see the privacy notice.
No production product data is used in public demonstrations. Prototypes use fictional data and are labelled.
Commercial summary
Existing tools. A written agreement with scope, term, costs, support hours, data boundaries, accessibility commitments and exit terms.
New builds. A written agreement covering scope, deliverables, participation and payment approach, IP position, data protection responsibilities and timescales.
IP. Partners own their data. Bespoke deliverables are assigned or licensed as set out in the agreement. Reusable YFD components remain ours and are licensed for the partner’s use.
Exit. Data export and deletion steps, documentation and handover are agreed before launch, not at the end.
Contacts. Supplier information and due diligence: procurement@youngfuturesdigital.co.uk. Invitations to tender and clarification questions: tenders@youngfuturesdigital.co.uk. Invoices and supplier set-up: accounts@youngfuturesdigital.co.uk.
Questions worth asking any social impact software supplier
- Who owns the data and who can export or delete it?
- What is the verified status of the product today, and when was it last updated?
- Who took part in design, were they paid, and what did they change?
- What does the DPIA say about location, children and community reports?
- How is accessibility tested, and by whom?
- What happens when the contract ends?
We answer all six in writing in every proposal.
Company details
YOUNG FUTURES DIGITAL LIMITED
Registered in England and Wales.
Policies index
All policies are published in full as accessible HTML. See the policies index.