Security / Compliance
Security and compliance.
How candidate data is protected, where it lives, who can reach it and what we can prove.
What a security review usually asks
Assessment systems hold some of the most sensitive data an organisation collects: identity documents, responses, scores, and the decisions taken from them. The answers below are the ones security and procurement reviews ask for. Where a line is bracketed, it is waiting on a confirmed fact rather than a claim.
- Data protection
- Website enquiries and measurement are described in the published privacy notice. Product-specific roles, responsibilities and data-subject procedures are agreed during contracting and documented for the deployment.
- Hosting and residency
- Hosting regions, international transfers and the applicable sub-processor list are deployment-specific. We provide the current details during security review rather than publishing assumptions here.
- Encryption
- The public website requires HTTPS. Product encryption, key-management and rotation controls are documented for the selected deployment during security review.
- Access control
- Product access is designed around role and tenant scope, with separation of duties for critical workflows. Available identity integrations are confirmed against the customer deployment.
- Human-in-the-loop
- AI drafts, ranks and flags; a qualified person approves every decision that affects a candidate. Approval chains are role-based and recorded.
- Auditability
- Versioned policies, receipts and publication history are designed to preserve the evidence behind an outcome. Retention requirements are set for each deployment.
- Continuity
- Backup, recovery, recovery-point and recovery-time requirements are agreed for the deployment and supported by operational evidence supplied during review.
- Assurance
- We do not imply a certification through this website. Current certifications, independent reports and remediation evidence are shared only when verified and applicable.
Running a security review? Send the questionnaire to hello@nirvanaintellect.com and we will complete it.
Ready when you are
Ask us the hard questions.
Bring your security, privacy and audit requirements - we would rather answer them early.
Book a demo View sample report