Our compliance posture, the controls behind it, every vendor that touches customer data, and the documents your security, privacy, and procurement teams will ask for. Current and honest. Where work is in progress, we say so.
Our posture is current and honest. Where work is in progress, we say so.
Plain-language summaries of what we actually do. Full evidence available under NDA.
This is the current list of every vendor that handles customer data. We update it here whenever the list changes.
Tools you connect with your own account are not on this list. That includes your email, calendar, CRM, ATS, job boards, and ad accounts. Your own agreement with each one covers that data.
Independent CREST-certified provider runs a black-and-grey-box test every year. Executive summary available under NDA.
Evidence is collected automatically across infrastructure, identity, and code. Findings trigger same-week remediation with audit trail.
Models are evaluated across demographic cohorts before release and on every model update. Methodology shared on request.
Your details are used solely to send the requested documents and respond to questions. We do not add you to marketing lists. We reply within one business day.
We accept CAIQ, SIG Lite/Core, or your own custom questionnaire. Standard turnaround is one business week. Need a security call to walk through the answers? Book a 30-minute slot.
GDPR by default. SOC 2 in progress. Encryption and audit logs on every plan.