Trust centre
Security, privacy and AI governance.
Review security, privacy and AI governance information for Epitome's workforce intelligence platform, including the status of each standard and the documents available on request.
09:42Exported shortlistClient Delivery Lead, 12 candidatesS. LimHR admin
09:31Changed fit weightsCompetency evidence 40% to 45%A. RahmanHiring manager
09:12Rotated encryption keyAWS KMS, scheduledSystem
08:55Granted reviewer accessMFA verified, expires in 30 daysR. KumarPlatform admin
Entries are immutableMFA on every admin account
How we protect data
Encryption, regional hosting, access control, testing and audit logging.
Security and governanceHow we handle personal data
Our privacy policy and PDPA data protection policy, and how to exercise your rights.
Privacy policyHow we use AI in decisions
Where Epitome uses AI in employment decisions, and where it does not.
Responsible AICompliance status
Where each standard stands today.
CSA STAR Level 1Cloud Security Alliance self-assessment, completed and published
PublishedISO/IEC 27001Controls operated to the standard; certification is on the roadmap
On roadmapSOC 2 Type IIControls mapped to the Trust Services Criteria; audit on the roadmap
On roadmapGDPR and UK GDPRDPA, EU standard contractual clauses and the UK addendum
Documents availableSingapore PDPAPersonal Data Protection Act 2012; Data Protection Officer appointed
DPO appointedDue diligence
Documents for your review.
Each document is shared on request. Tell us which ones you need and the team replies within one working day.
Security overview packArchitecture, controls and hosting options
Incident response summaryTriage, notification targets and recovery objectives
Architecture notesTenant isolation, encryption and key management
Data processing agreementWith EU standard contractual clauses and UK addendum
Sub-processor registerCurrent list of sub-processors and their locations
Responsible AI documentationIntended purpose, model inventory and limitations