Security
Assessment data deserves enterprise-grade safeguards.
From SOC 2 controls to proactive monitoring, we treat candidate responses and hiring signals like the crown jewels.
Trust & compliance
Audited controls
- SOC 2 Type II controls
- GDPR-ready data processing agreements
- Social sign-in via Google and LinkedIn
Data protection
Encryption + retention
- Encryption in transit (TLS 1.3) and at rest (AES-256)
- Hourly backups with 35-day retention
- Role-based permissions with audit trails
Product security
Testing + disclosure
- Feature flags + staged rollouts to reduce risk
- Independent penetration testing twice per year
- Responsible disclosure program for researchers
Need to report something?
security@evalon.app
Visit https://status.evalon.app for live uptime. Email us for questionnaires or penetration test reports.