SkillCort Trust Center
Security & privacy
How SkillCort approaches privacy-by-design, data separation, access, retention and backups — stated only within what is verified today.
Privacy by design
SkillCort is designed with privacy-by-design controls informed by GDPR and KVKK principles.
Data separation
Workspaces and tenant data are separated so one organization's data is not exposed to another.
Access controls
Access uses role-based, least-privilege defaults. Sensitive implementation details are not published here.
Encryption
Candidate and client data is encrypted in transit and at rest.
Audit and version history
Score, decision and governance changes are recorded, with append-only history for outcomes and exportable audit packs for review and audits.
Proctoring media
Camera, screen, and microphone capture are each turned on per assessment by the organization and disclosed to the candidate on the consent screen before the exam starts — nothing is captured unless the organization enables it. A reviewer can also ask AI to help scan an assessment's webcam images and point to frames worth a closer look; this runs only when a reviewer starts it, never automatically, and never makes or changes a decision. It uses an established third-party AI provider.
Retention
Per-workspace retention windows are currently enforced for supported camera, screen, and microphone monitoring data. Broader retention policies are handled by agreement while automated retention capabilities expand.
Backups
Backups run daily. Extended point-in-time recovery is not currently enabled.
Subprocessors
Legal documents
Draft versions of SkillCort's Privacy Policy and Cookie Policy are published for review; they are in legal review and not yet in force. Terms and the Data Processing Addendum are being prepared and are not yet generally available.
Security contact
To report a security concern, contact us through our contact page. Dedicated privacy and security addresses are being set up and will be published here once operational.
More in the Trust Center
- AI GovernanceWhere SkillCort uses AI, and where AI does not have final ownership.
- Human Decision ControlPeople own assessment outcomes; AI outputs stay advisory.
- Candidate RightsWhat the candidate experience is today, described honestly.
- AccessibilityThe accessibility target and current state, without overstating conformance.
- Governance ReportA sanitized, versioned report of verified controls and documented limitations.
Public Trust Statement v1.8.0 · source governance manifest v1.6.0 · last verified 5 August 2026 · Closed with documented limitations.