Security and Compliance for Your Billing Operation
Your billing data is your business. We protect it that way.
ZOEY holds your customer records, pricing, supplier costs and invoices, some of the most commercially sensitive information your business owns. That is why security is built into the way we host, develop and support the platform, not bolted on afterwards.
Tekton Billing is certified to ISO 27001 and Cyber Essentials, and ZOEY is hosted in the UK across two data centres. Every login is protected by two-factor authentication, and single sign-on lets your staff and your customers use the work accounts they already have. When your procurement or security team needs evidence, we are ready to provide it.
ISO 27001 Certified
Cyber Essentials Certified
UK Dual-Site Hosting
Two-Factor Authentication and SSO
Independently Certified to ISO 27001
ISO 27001 is the international standard for information security management. Our certification means the way we manage risk, access, suppliers, change and incidents is documented, followed and independently audited.
We also hold Cyber Essentials certification, the UK government-backed scheme that protects against the most common cyber threats. Together, they give your board, your auditors and your customers confidence that billing data is in safe hands.
- Certified information security management system
- Regular independent audits of our controls
- Cyber Essentials certified across the organisation
- Certificates available for your supplier review
How We Protect Your Billing Data
Security runs through every layer of ZOEY, from where your data is hosted to how your team signs in.
UK Private-Cloud Hosting
ZOEY is hosted in a UK private cloud across two separate data centres, keeping your billing data in the UK and your platform resilient.
Two-Factor Authentication and Single Sign-On
Every ZOEY user signs in with two-factor authentication as standard, so a stolen password alone is never enough to reach your billing data. ZOEY also supports single sign-on (SSO) for your team in the admin portal and your customers in the customer portal, so people sign in with their existing company accounts and access is removed centrally when someone leaves.
Controlled User Access
Each user has their own login, so you decide who in your team can access ZOEY and you can remove access the moment someone leaves.
Independent Security Testing
ZOEY is penetration tested every year by a CREST-accredited provider, with findings tracked to remediation under ISO 27001.
Backup and Continuity
Data is backed up and the platform runs across two UK sites, so your billing operation can keep running if one location is affected.
Secure Supplier Connections
Usage files are collected automatically over SFTP and APIs, rather than emailed spreadsheets, reducing risk and manual handling.
Compliance Built Into Your Billing
Good security protects your data. Good billing also helps you meet your obligations to customers and regulators.
ZOEY gives your customers the online access and controls UK regulation expects, and gives your team the accurate, consistent billing that stands up to scrutiny.
Ofcom Requirements
Customers can view usage, spend and invoices online, as Ofcom’s rules require.
UK GDPR
Billing data is held in the UK and handled under our certified controls.
Spend Caps and Alerts
Multi-stage alerts and caps help protect customers from bill shock.
Accurate, Consistent Bills
Automated rating and pre-invoice checks reduce errors and disputes.
Ready for Your Supplier Due Diligence
Whether you are a growing reseller or part of a larger group, your billing supplier will be reviewed. We make that easy. We can share our current certificates and their scope, complete your security questionnaire and talk your team through our hosting, access and continuity arrangements.
We will never publish sensitive details such as test reports or infrastructure design on our website, but we are happy to provide the right information, in the right way, to support your assessment.
- Current ISO 27001 and Cyber Essentials certificates
- Completed supplier security questionnaires
- Hosting, backup and continuity overview
- Clear contractual responsibilities for each party
Why Partners Choose Tekton Billing
Telecoms providers, MSPs and subscription businesses choose Tekton Billing for far more than software. Here is what sets us apart.
Fully Supplier-Agnostic
Tekton Billing isn’t tied to any network or distributor, so you choose the suppliers that suit your business and change them whenever you need to.
New Providers Built Free
Usage loads from more than 400 supported providers. If one of yours isn’t on the list, we build the connection for you at no extra cost.
Your Brand, Front and Centre
Customers see your logo, colours and web address on their portal, invoices and emails, never ours, giving you a real edge over competitors.
Everything Included
Unlimited users, every module, hosting, branding and the customer portal come as standard, with no light version and no add-on fees.
UK Billing Specialists
Our UK-based team understands billing inside out, from rate cards and supplier files to month-end, and is on hand whenever you need us.
Certified and Secure
Tekton Billing is certified to ISO 27001 and Cyber Essentials, and every ZOEY user is protected by two-factor authentication as standard, with single sign-on (SSO) available for your team and your customers.
Security and Compliance Questions
Is Tekton Billing ISO 27001 certified?
Yes. Tekton Billing is certified to ISO 27001, the international standard for information security management, and we also hold Cyber Essentials certification. We can share our current certificates and their scope on request.
Where is ZOEY hosted?
ZOEY is hosted in a UK private cloud across two separate data centres, so your billing data stays in the UK and the platform is resilient.
Is ZOEY penetration tested?
Yes. ZOEY undergoes annual penetration testing by a CREST-accredited third-party security provider. We do not publish test reports, but we can discuss our testing approach as part of your supplier review.
How do users sign in to ZOEY?
Every ZOEY user has their own login, protected by two-factor authentication as standard. ZOEY also supports single sign-on (SSO), so your team and your customers can sign in with their existing company accounts.
Can you complete our security questionnaire?
Yes. Send us your supplier questionnaire or security requirements and we will provide the relevant evidence for your review.
What if we operate outside the UK?
ZOEY is hosted in the UK as standard, and hosting in Europe, the USA and other regions can be arranged where your operational or regulatory requirements call for it.
Talk to Us About Your Security Requirements
Share your questions, your questionnaire or your procurement checklist. We will give you clear answers and show you how ZOEY keeps your billing secure.
01
Tell Us About Your Business
Share the services you sell, the suppliers you use and where billing takes too long today.
02
See ZOEY With Your Scenarios
We walk through your tariffs, supplier files and invoices in ZOEY, from the admin portal to the customer view.
03
Get a Clear Proposal
You receive a clear proposal covering scope, migration and pricing, with no obligation to proceed.