Security & Compliance

1. Our commitment to security

Energicore is built for homeowners and professional organisations who need accurate, trustworthy energy advice. We take the security of your data seriously and are committed to maintaining a platform that meets the expectations of UK public-sector and professional buyers.

2. Data protection & UK-GDPR

Energicore is operated by HouseWrapped, which is registered with the Information Commissioner's Office (ICO). Registration number: ZB909895.

We process personal data in accordance with UK data protection law (UK-GDPR). Our lawful bases for processing include legitimate interests in providing and maintaining the platform, and fulfilling our contractual obligations to registered users.

  • Data Processing Agreement: A Data Processing Agreement (DPA) is available on request for organisational customers who require one for procurement or compliance purposes.
  • Data retention: Contact details are retained for up to two years following your last active contact. Property data may be retained to support the platform's energy modelling capabilities; it is not shared alongside your contact details.

For full details of how we collect, use, and protect your information, please see our Privacy Policy.

3. Data handling & safeguards

We apply industry-standard technical and organisational measures to protect the data held on our platform.

  • Encryption in transit: All connections to Energicore are encrypted using HTTPS (TLS).
  • Hosting: Platform data is hosted within the UK and European Economic Area (EEA) using established cloud infrastructure providers.
  • Access controls: User accounts are protected by authentication. Organisation accounts support role-based access so team members only see the data relevant to their role.
  • Secure sharing: Property plans can be shared via time-limited, expiring links rather than open public URLs.

4. Official data sources

Energicore retrieves property energy performance data from the official UK Government Energy Performance Certificate (EPC) register where a certificate exists. Where no certificate is on record, we build an estimated profile from property characteristics using RdSAP-aligned assumptions.

Raw EPC data can be technical and inconsistent. We clean and normalise records before presenting them, so homeowners and advisors see a clear, consistent view of each property's construction, heating system, and energy rating.

Grant eligibility checks reference publicly available scheme criteria for programmes including the Great British Insulation Scheme (GBIS), ECO4, the Boiler Upgrade Scheme (BUS), and local authority grants. Eligibility is indicative and subject to scheme rules at the time of application.

5. Accessibility

We are committed to making Energicore accessible to all users, including those who rely on assistive technologies. We are working towards conformance with the Web Content Accessibility Guidelines (WCAG) 2.2 at Level AA.

If you encounter accessibility barriers while using the platform, please contact us at hello@energicore.app and we will do our best to address your needs.

6. Certifications & roadmap

We are actively pursuing the following certifications and standards to further strengthen our security and compliance posture:

  • Cyber Essentials: UK government-backed baseline cyber security certification.
  • ISO 27001: International standard for information security management systems.
  • WCAG 2.2 AA: Web accessibility standard for public-sector and inclusive use.

These certifications are in progress. We will update this page as they are achieved.

7. Your rights & contact

Under UK data protection law, you have rights including access, rectification, erasure, restriction, objection, and data portability. Full details are set out in our Privacy Policy.

For security enquiries, DPA requests, or compliance questions, contact us at hello@energicore.app.