Our certificate is public on the BlockMark registry: certificate number 04ee0c7c-c603-45e9-a86e-bfb426829beb.

The short version

  • Who: Benaiah AI Ltd, the company behind Telephonist and Still Ask.
  • What: Cyber Essentials certified, with a Certificate of Assurance. The scope is the whole organisation.
  • When: certified on 10 November 2026. Recertification is due on 10 November 2027.
  • What it isn’t: a guarantee. It’s a baseline against the most common cyber attacks, and it certifies the company, not any one product.
  • Check it: scan the QR code on the certificate, or open our record on the registry.

What is Cyber Essentials?

Cyber Essentials is a UK Government-backed certification scheme developed by the National Cyber Security Centre (NCSC). The NCSC calls it “the minimum standard of cyber security recommended by the Government for organisations of all sizes”. It checks five technical controls, designed to prevent the most common internet-based threats:

  • Firewalls: a security filter between the internet and the organisation’s network.
  • Secure configuration: computers and devices set up to minimise the ways an attacker can get in.
  • Security update management: software kept up to date, so known weaknesses can’t be used as a way in.
  • User access control: control over who can reach data and services, and with what level of access.
  • Malware protection: viruses and other malicious software found and stopped before they can cause harm.

IASME is the NCSC’s official Cyber Essentials Delivery Partner. It licenses certification bodies, which assess whether an organisation meets the scheme’s requirements.

What our certificate says

  • Organisation: Benaiah AI Ltd, 5th Floor, 167–169 Great Portland Street, London W1W 5PF.
  • Certificate: Certificate of Assurance. It states that we comply with the requirements of the Cyber Essentials scheme.
  • Scope: whole organisation. The whole company was in scope, not just one office, team or system.
  • Profile version: 3.3 (Danzell), the version of the requirements we were assessed against.
  • Certification body: Support Stack. Cyber Essentials partner: IASME.
  • Certificate number: 04ee0c7c-c603-45e9-a86e-bfb426829beb. Certified 10 November 2026; recertification due 10 November 2027.

What it means, and what it doesn’t

The certificate says plainly what it is. In its own words:

The Certificate certifies that the organisation was assessed as meeting the Cyber Essentials implementation profile and thus that, at the time of testing, the organisation’s ICT defences were assessed as satisfactory against commodity based cyber attacks. However, this Certificate does not in any way guarantee that the organisation’s defences will remain satisfactory against a cyber attack.

So Cyber Essentials is a baseline, not a guarantee. It shows that the basics were in place when we were assessed, and we have to be recertified by 10 November 2027 to keep it.

It’s a certificate for the organisation, Benaiah AI Ltd. It isn’t a certificate for Telephonist, Still Ask or any other product.

Why it matters for Telephonist

Businesses hire a Telephonist to answer their calls, and calls are personal. Before trusting us with them, a business should be able to check how we look after our own systems, without taking our word for it. Cyber Essentials is that independent check, for the basics.

Buyers increasingly ask for it, too: the NCSC notes that a growing number of organisations require suppliers to be certified to bid for work.

It sits alongside our registration with the ICO and the promises in our privacy notice about how we handle callers’ information.

Check it yourself

Scan the QR code on the certificate above, or open our certificate on the BlockMark registry. To learn more about the scheme, read the NCSC’s Cyber Essentials overview.

Questions about how we keep Telephonist secure? Email hello@telephonist.ai.