Website
Guides, gates, and updates
The hosted site manages access, checkout state, mission progress, and support information.
TrustLaunch trust
A local-first preparation route with clear boundaries.
RightCyber is designed to help you prepare accurate Cyber Essentials answers without turning the website into a store for sensitive evidence.
Data flow
Your evidence does not pass through RightCyber.
Desktop Builder
Stores your working record
Answers, evidence context, screenshots, attached files, gaps, exports, and backups stay in the local workspace you control.
Official portal
You choose what to submit
You decide what to send to your chosen certification body. RightCyber is preparation support, not the assessment destination.
What the website stores
The hosted customer area stores account access, subscription state, operational records, and mission completion progress. It does not ask you to upload Cyber Essentials evidence or type Builder answers into the website.
What stays local
The desktop Builder stores your answers, evidence notes, attached files, copied screenshots, action log, final checklist, Evidence Pack exports, and Workspace Backup ZIPs on the computer or folder you control.
Recovery model
Evidence Pack ZIPs are for assessment or internal records. Workspace Backup ZIPs are for recovery and can be restored by the desktop app. Consultant Practice Backup ZIPs restore the Consultant client index and every local client workspace.
Annual renewal
Cyber Essentials changes over time. Active access includes RightCyber content and Builder updates while the subscription is active, so next year starts from the local work you kept rather than from a blank questionnaire.
Sign-in and passwords
Access uses email sign-in links and one-time codes tied to your checkout email. There is no password to create, reuse, or leak, and no password database to breach.
Payments and card details
Checkout, VAT, and receipts are handled by our Merchant of Record, Stripe (via Stripe Managed Payments). Your card details go to Stripe, not to RightCyber — we never see or store them.
Analytics and tracking
The website uses privacy-light, cookie-free page analytics with no cross-site tracking. There are no advertising pixels and no third-party marketing scripts.
Certification boundary
RightCyber is preparation support, not a certifying body. It does not issue certificates, replace assessor judgement, or guarantee that an organisation will pass. The certification assessment is bought separately from your chosen certification body.
Official sources
Use RightCyber alongside the current NCSC Cyber Essentials requirements, the current IASME question set, and any guidance from your chosen certifying body. Where those sources change, they remain the authority.