Document library

Public-facing summary of how Pocket PMO is secured, including identity, encryption, tenant isolation and AI safeguards.

What personal data Pocket PMO processes, why, and on what basis under UK GDPR.

DPIA covering AI, meeting content, uploaded documents, external sharing and international transfers.

Draft DPA covering the terms on which Pocket PMO processes personal data on behalf of customers.

Internal information-security policy applied across Pocket PMO Ltd.

How AI is used across Pocket PMO, and the safeguards around it.

How long each category of data is retained and how deletion is performed.

How Pocket PMO detects, contains, communicates and recovers from security incidents.

How Pocket PMO continues to serve customers through disruption.

How Pocket PMO would recover from a major service-impacting event.

Complete list of sub-processors used to deliver the Pocket PMO service.

Executive-level summary of Pocket PMO security architecture and controls.

Architectural view of the Pocket PMO platform for enterprise IT and security architects.

Rules customers agree to follow when using Pocket PMO.

Short customer-friendly summary of how Pocket PMO uses AI.

Quoted commitments from OpenAI and Google on training and retention of API data, as used by Pocket PMO.

The exact templates Pocket PMO uses to notify customers during an incident, including the 72-hour breach notification.

Answers to the questions we hear most from customers and procurement teams.