Looking after your data

Cybersecurity overview

We know how important your data is to you. At Path, protecting your data is one of our highest priorities. We have robust cybersecurity measures in place to ensure your information remains safe and secure at all times.

Access control

We strictly limit access to your data. Only authorised team members who require access to perform their job duties are permitted to view or handle sensitive client information.

Email and phishing protection

To prevent fraud, we never act on sensitive requests (e.g., transfers or account changes) based solely on email. We always verify such requests through a secondary communication channel before taking any action.

Proactive communication

We keep clients informed about digital risks and incorporate guidance on fraud prevention into our customer onboarding documentation.

Training and awareness

All of our staff must complete cybersecurity training each year. We also work with an external security provider to deliver ongoing training and simulated phishing exercises to ensure our team stays alert and informed.

Device and network security

We enforce strict security controls across all devices and networks used by our team, helping prevent unauthorised access and ensuring data integrity. 

Mandatory VPN use for all staff ensures secure, encrypted access protecting sensitive data from cyber threats and maintaining data integrity regardless of location. This is essential for preventing data breaches, particularly for remote workers and for creating a consistent, secure network across our office locations.

Data storage and transmission

Your data is only stored and transmitted using secure, company-approved platforms—such as encrypted portals or secure cloud services. We never send sensitive information via unencrypted email.

Regular updates and patching

We keep all our systems—including operating systems, applications and web browsers—up to date with the latest security patches to protect against emerging threats.

Incident response

Internal procedures are in place to respond swiftly to any suspected data breach. Our goal is to minimise risk and ensure full transparency where appropriate.

If a breach occurs affecting your personal data, we will notify you promptly, investigate and take steps to mitigate harm.