True Assess | Secure Your Hiring Process

Last Updated: October 24, 2024

At True Assess ("we", "our", or "us"), we recognize that integrity is the currency of our business. We handle sensitive data regarding hiring vulnerabilities, candidate forensics, and institutional security. We hold ourselves to a standard of data stewardship that exceeds typical SaaS providers, operating under a "Zero-Trust" privacy framework.

1. Assessment Data Handling

Data collected during Vulnerability Audits is strictly siloed. Our proprietary "Adversarial Simulation" engine operates on isolated instances for each client. We do not use client-specific vulnerability data to train our shared adversarial models without explicit, written consent. Your security posture remains your intellectual property.

2. Candidate Privacy & Forensics

While our platform analyzes aggregate patterns of cheating behavior ("Tradecraft Indicators"), individual candidate data used in our research is rigorously anonymized. We protect the privacy of the "adversary" just as we protect the client. Personally Identifiable Information (PII) captured during proctoring sessions is encrypted at rest and in transit, accessible only to authorized forensic analysts.

3. Data Collection & Usage

We collect information to provide and improve our Services, including:

Client Account Data: Name, professional email, and organizational details necessary for service provisioning.
Telemetry Data: Anonymized usage metrics of our platform to optimize performance and detect anomalies.
Forensic Metadata: Technical signals (e.g., browser fingerprints, network latency patterns) used exclusively for integrity verification.

4. Data Sovereignty & Sharing

We do not sell, rent, or trade your personal information. Data may be shared with trusted third-party service providers solely for the purpose of operational infrastructure (e.g., cloud hosting, secure payment processing) under strict Data Processing Agreements (DPAs). We comply with all applicable data sovereignty laws, including GDPR and CCPA.

5. Security Protocols

We employ institutional-grade security measures, including multi-factor authentication, rigorous access controls, and regular penetration testing. However, no digital transmission is entirely impenetrable. We maintain a dedicated Incident Response Team to address potential security events immediately.

6. Your Rights