MKT-04 · Privacy and security
Privacy controls are visible in the operating model
Reporting floors, structural separation, scoped access, consent and human review reduce avoidable exposure.
Designed into the flow
Product safeguards
Anonymity floor
Scores are not shown for a slice below five workers or an active suppression window.
Structural separation
Support and investigation information cannot be joined to assessment data.
Scoped access
Managers see assigned teams only; restricted resources are existence-hidden.
Human review
AI output is advisory and cannot complete a decision gate.
Data lifecycle
Exports precede deletion, legal holds are checked, and execution uses dual control.
Published transparency register
Sub-processors
| Processor | Purpose | Region | Transfer | Status |
|---|---|---|---|---|
| Supabase | Data platform | UK | UK deployment | approved |
| Anthropic | AI drafting | UK/EEA | DPA + SCC | approved |
| Kombo | HRIS aggregation | EEA | SCC | approved |