Trust & security

The trust page, without the theater.

DeepAssessment holds candidate work sessions and hiring decisions — data worth protecting properly. Here is how we actually handle it.

Data protection
✓All traffic is encrypted in transit with TLS
✓Passwords are stored only as secure hashes — never in plain text
✓Session recordings and media live in access-controlled object storage, scoped to the owning workspace
✓Payment details are handled by Razorpay; card numbers never touch our servers
Access control
✓Workspaces are hard tenant boundaries — one team’s candidates and evidence are never visible to another
✓Role-based permissions inside each workspace govern who can see and do what
✓Users can review active sessions and revoke any device — one, all others, or everything at once
✓Sensitive account actions are confirmed by email and recorded for audit
Candidate data handling
✓Capture is consent-first: disclosed before the clock starts, indicated while live, and off after submit
✓Session evidence is used for one purpose — the hiring decision it was created for
✓Candidate data is never sold and never used for advertising
✓Access, correction, and deletion requests are honored under the DPDP Act and GDPR
Operations
✓Hosted on reputable cloud infrastructure with environment separation between production and development
✓Least-privilege access for the team, with production access limited to those who operate it
✓Continuous monitoring and error tracking on the platform’s critical paths
✓Backups for critical data, tested as part of normal operations