Zero Breaches in 25 Years
Professional Assurance: As a professional consultancy serving governments, financial institutions and leading steelmakers, our security infrastructure reflects the same rigour we apply to strategic advisory work and expert witness services. With 25+ years of steel industry expertise and zero security breaches, our platform employs industry-standard security measures including SSL/TLS encryption, secure Italian hosting infrastructure, and regular backups to protect client data.
Security Overview
SteelOnTheNet operates a robust security infrastructure designed to protect sensitive steel industry intelligence, commercial data, and strategic information. Our platform serves government agencies, investment banks, global steelmakers, and policy institutions requiring high levels of data integrity and confidentiality.
Since our incorporation in 2003 and ICO registration in 2002 (Z6374301), we have maintained an unbroken record of operational security with zero data breaches or security incidents. This track record reflects our commitment to professional standards and continuous investment in security infrastructure.
Security Metrics
Infrastructure Security
SSL/TLS Encryption
All data transmitted between your browser and our servers is protected using industry-standard SHA-256 SSL/TLS encryption provided by Sectigo (valid to February 2027). This ensures that sensitive information including login credentials, payment details, and proprietary research data cannot be intercepted during transmission.
Secure Hosting Infrastructure
Our platform operates on professional hosting infrastructure provided by Names.co.uk (part of Team Blue Internet Services UK Limited) with servers located in secure Italian data centres. Standard security protections include firewalls, physical data centre security, and secure server configurations with prompt security updates.
Data Backup Systems
Automated daily backups to secure Italian storage facilities ensure business continuity and disaster recovery capability. Secure backup storage maintains integrity of historical records dating back to 2001, protecting against data loss whilst ensuring data remains within European jurisdiction.
Access Control
Secure authentication systems protect member areas and subscription content. Password policies enforce strong credentials, and session management ensures secure logout procedures. Administrative access operates on principle of least privilege.
Security Monitoring
Our hosting infrastructure includes standard security protections such as firewalls and malware scanning. We maintain secure configurations, apply security updates promptly, and monitor for suspicious activity to maintain platform security.
Performance & Availability
Our Italian hosting infrastructure provides reliable performance backed by Team Blue's professional hosting services. Regular backups and provider-level redundancy help maintain service continuity.
Platform Integrity
Content Authentication
All steel industry data, research content, and market intelligence published on our platform undergoes rigorous verification processes. Our research methodology combines primary source validation, cross-referencing with industry databases, and expert analysis to ensure accuracy and reliability.
Professional Standards
As professional consultants serving governments and CEOs of leading steelmakers, we maintain strict confidentiality protocols appropriate for handling sensitive commercial intelligence and proprietary research.
Payment Security
Financial transactions are processed through PayPal, which maintains PCI DSS Level 1 compliance, the highest security standard for payment card processing. We do not store credit card information on our servers, delegating payment processing to this certified secure platform.
Operational Security Timeline
2001 - Platform Launch
Initial deployment with secure hosting infrastructure and SSL encryption from inception, establishing foundation for professional standards.
2002 - ICO Registration
Formal registration with UK Information Commissioner's Office (Z6374301), demonstrating commitment to data protection and regulatory compliance.
2003 - Company Incorporation
Metals Consulting International Limited incorporated (04938719), establishing formal governance structure and professional indemnity coverage.
2010s - Infrastructure Upgrades
Migration to enhanced hosting infrastructure with Italian data centre deployment, improved backup systems and strengthened security configurations.
2018 - GDPR Compliance
Implementation of enhanced data protection framework aligned with EU General Data Protection Regulation standards, later maintained under UK GDPR.
2025 - Current Framework
Ongoing security enhancement programme with infrastructure updates and alignment with evolving cybersecurity best practices, maintaining servers in Italian data centres.
Data Governance & Quality Assurance
Our security infrastructure protects data that has been collected and verified through rigorous methodological standards maintained since 2001. This dual commitment to security and accuracy ensures that the steel industry intelligence we protect meets the highest professional standards.
Methodological Security Integration
- Source Verification: All data undergoes multi-source cross-checking before entering secure databases - see our verification framework
- Data Integrity: Security measures protect the accuracy of 1,300+ capital investment records and comprehensive facility databases
- Professional Standards: Our transparent research methodology operates within the same secure environment that serves government and top steelmaking clients
Compliance & Certifications
Regulatory Framework
Our security practices align with multiple regulatory and industry standards:
Full compliance with data protection regulations
Z6374301 since 2002
04938719 - Active status
£1M+ coverage (Hiscox)
As professional consultants to governments and leading steelmakers, we maintain security practices appropriate for handling sensitive commercial intelligence, applying rigorous standards developed over 25 years of serving high-profile clients.
Business Continuity
Our business continuity framework ensures reliable service delivery:
- Regular Backups: Automated daily backups to secure Italian storage protect against data loss, with backup systems maintaining integrity of historical records dating back to 2001.
- Disaster Recovery: Backup and recovery procedures enable restoration of services following disruptive incidents, with hosting provider redundancy supporting continuity.
- Data Integrity: Careful data management and quality control processes maintain historical accuracy of steel industry intelligence over our 25-year operational history.
- European Infrastructure: All hosting and backup systems operate within Italian data centres, maintaining data sovereignty within EU jurisdiction and regulatory compliance.
Client Confidentiality
Professional confidentiality obligations extend to our platform security:
Consulting Work Protection
Strategic advisory projects for governments and corporations operate under strict non-disclosure agreements. Consulting work and client files are maintained separately from public platform content, ensuring client confidentiality and competitive intelligence protection.
Subscription Data Security
Member accounts are protected with secure passwords, SSL encryption, and access controls to prevent unauthorised access to subscription content and personal information.
Research Data Integrity
Our extensive databases covering 1,500+ steel facilities, M&A transactions, capacity trends, and market intelligence represent decades of research investment. Security measures protect this intellectual property whilst ensuring data accuracy and reliability.
Security Best Practices for Users
Whilst our infrastructure provides robust security, users should follow these recommendations:
- Strong Passwords: Use unique, complex passwords for your account. Consider using password manager software for enhanced security.
- Secure Connections: Always access the platform via HTTPS (https://www.steelonthenet.com) to ensure encrypted transmission.
- Log Out: When using shared or public computers, always log out after completing your session.
- Update Browsers: Keep your web browser updated to the latest version for optimal security patches and encryption protocols.
- Report Issues: If you notice any suspicious activity or security concerns, contact our team immediately.
Third-Party Security
We carefully vet all third-party services integrated with our platform:
- Payment Processor: PayPal maintains PCI DSS Level 1 compliance, the highest security standard for payment card processing.
- Analytics Services: StatCounter (Ireland-based) provides visitor analytics with appropriate data processing agreements and EEA-based infrastructure.
- Hosting Provider: Names.co.uk (Team Blue Internet Services UK Limited) provides professional hosting with Italian data centres, standard security protections and data centre safeguards.
Ongoing Security Programme
We maintain a continuous security improvement programme:
- Regular review of security configurations and access controls
- Monitoring of emerging cybersecurity threats and vulnerabilities
- Infrastructure updates to incorporate current security technologies
- Security awareness and best practices implementation
- Review and update of security policies in line with evolving standards
Security Commitment: Our 25-year track record of zero security breaches reflects continuous investment in infrastructure, processes, and expertise. As a professional consultancy serving governments and leading steelmakers, we maintain security standards appropriate for the sensitive information entrusted to us.
Contact Security Team
For security-related enquiries, vulnerability reports, or incident notifications, please contact our team immediately. We take all security matters seriously and respond promptly to legitimate concerns.
Professional Compliance Training
To ensure the highest standards of professional conduct and data security, our management maintains current certifications in:
- Cyber Awareness for Managers (Cyber Clear) - Hiscox/National Cyber Security Centre (2025) [ View Certificate ]
- Anti-Bribery & Corruption - Hiscox CPD Certified (100% assessment, valid until Dec 2026) [ View Certificate ]
For comprehensive information about our company, professional services, and industry expertise, please review our About page and Consulting Services.
Last Updated: 1st January 2026
Next Review: January 2027