An architecture in progress
These principles describe the intended security architecture and product posture, not a certification or completed audit. Implementation would require tested controls, monitoring, and qualified review.
Founded in London in 1987 · Head office: Canary Wharf
Security
Security by deliberate design
The proposed Summit experience is shaped around minimizing exposure, making sensitive actions explicit, and treating trust as an ongoing operating responsibility.
Read our security principlesLeast-privilege thinking
Design principles that limit access to what is needed for a specific role, action, or moment.
Protected journeys
Conceptual safeguards around sign-in, sensitive changes, session awareness, and confirmation of important actions.
Visible accountability
An emphasis on useful notices, reviewable activity, and clear paths for reporting concerns.
No unsupported assurances
Summit does not claim to be independently audited, fully secure, or fully compliant. Specific controls and disclosures will be published only when they are real, tested, and appropriate to the activated service.