Trust and security

NGA Dynamics Ltd is registered in England and Wales, company number 16683205. Registered office: 36 Manvers Street, Hull, England, HU5 2HW. We build and operate LUCY and WasteMapper, and we are a member of the Hull & Humber Chamber of Commerce.

Contact: info@ngadynamics.co.uk or +44 7427 900084.

We process the data customers put into LUCY to provide the service, and we do not sell it. Our Privacy Policy, Terms and Cookie Policy set out the detail, including your rights and how to ask us to delete data.

• Connections to LUCY use HTTPS, and browsers are told to use HTTPS only (HSTS).
• Each organisation is a separate account. Access is limited by role, and data is separated by organisation using database row-level security together with permission checks in the application.
• Stored integration credentials and authenticator secrets are encrypted with AES-256-GCM.
• Public endpoints such as sign-up and booking are rate limited.
• The site sends a Content Security Policy and standard browser security headers.

An independent external scan of lucy-os.net on 24 September 2026, covering 15 external controls, reported no critical or high-severity findings. Its other findings were about email and DNS configuration. We treat that as a point-in-time check, not a guarantee: no system is completely secure, and we fix what we find.

These are the main providers that handle data on our behalf. This list is kept up to date, and we can send you the current version on request.

For help, or to report a security concern, email info@ngadynamics.co.uk. Security researchers can find our contact details at /.well-known/security.txt.