Hosting and infrastructure
AWS Mumbai (ap-south-1) by default. Multi-availability-zone deployment. Encrypted backups. Disaster recovery target: RPO 24 hours, RTO 8 hours. Architecture diagram or schematic
Customer Data, Treated With the Care it Deserves
TalentEase AI handles candidate CVs, hiring decisions, and personal data. We have built the platform around the assumption that this data is sensitive, that customers will audit us, and that we should make their auditors' lives easy.
Encryption
TLS 1.2+ in transit. AES-256 at rest. Database backups encrypted with the same standard. Encryption keys managed in AWS KMS
Access controls
Role-based access on every customer workspace. SSO via SAML 2.0 and OIDC on Ultimate and Custom. SCIM provisioning on Custom. Internal access to customer data is logged, audited, and limited to a named set of engineers under formal procedures.
Compliance and certifications
GDPR-aligned data processing. SOC 2 Type II in progress — audit cycle running, results published when complete. ISO 27001 on the roadmap.
Data Processing Addendum
Available on request, signable before contract. PDF download.
Data subject rights
Export, correction, deletion, and portability honored under GDPR Article 15–20. Customer-controlled data export available in-product on every plan.
Vulnerability disclosures
Responsible disclosure programme published. security@talenteaseai.com is monitored. We aim to acknowledge within 48 hours and remediate critical issues within 14 days.
Subprocessors
A current list of subprocessors is published and updated whenever it changes. Customers are notified of material changes
Incident response
Documented incident response procedure. Customer notification within 72 hours of a confirmed personal data breach, in line with GDPR.
Downloads
Data Processing Addendum
Subprocessor list
Security overview one-pager
SOC 2 Type II report
Need to talk to our security team?
For procurement reviews, security questionnaires, or specific compliance questions, email or use the contact form.