Security & Compliance
Security and Compliance
The security of our clients, our candidates, and our assessments is a top priority at Care Predictor. Hundreds of organizations trust Care Predictor to help them maximize their employee's success.
Compliance
Care Predictor is ISO27001:2022 certified and compliant with all major global regulations.
Learn MoreInformation Security
Information Security at Care Predictor
At Care Predictor, the security of our clients, candidates, and assessment data is a top priority. We invest in leading-edge technologies and practices to ensure our platform remains secure-without compromising performance or user experience.
Our approach is built on resiliency and zero-trust principles, and includes:
- Federated services to manage user access and permissions
- A Secure Software Development Lifecycle (SDLC), aligned with OWASP, including both DAST and SAST code reviews
- A strict no BYOD (Bring Your Own Device) policy
- Ongoing, organization-wide security training
We've adopted ISO 27001:2022 as our information security management system, reinforcing our commitment to safeguarding data-not just for compliance, but to exceed expectations in trust and protection.
End-to-End Security
The Care Predictor platform is hosted entirely on Amazon Web Services (AWS), which boasts robust built-in privacy features and provides end-to-end security. AWS is certified SOC 2 Type 2, meaning that they are regularly audited and tested to meet these high security standards.
Care Predictor customer data is hosted by AWS in secure data centers around the globe. AWS maintains an impressive number of reports, certifications, and third-party assessments to preserve their state-of-the-art data center security.
Learn about AWS Security →
Application Security
- Automated security testing
- Regular third-party penetration testing
- AES-256 encryption for data at rest
- TLS encryption for data in transit
- Two-Factor Authentication
- Single Sign-On (SSO)
Scalability
- Auto-scaling best practices
- Serverless technology investments
- Infrastructure that expands on demand-no matter the size or complexity of your data
Stability
- End-to-end encryption
- Redundant systems
- Dynamic scaling that prevents service interruptions or downtime
End-to-End Security Culture
Beyond technical controls, every Care Predictor employee is trained and held accountable to rigorous security standards-reinforcing our commitment to data protection at every level.
Compliance
Care Predictor is compliant with the following regulations
ISO 27001:2022
SOC 2
PCI-DSS 4.0
NIST Cybersecurity Framework
Privacy
Privacy by design.
Care Predictor embraces privacy from the ground up by building our products to adhere to design principles that better enable us to protect your data. Our approach to personally identifiable information is to collect only the minimal amount to provide our service.
Read our Privacy PolicyPrivacy Principles
- Lawfulness, fairness, and transparency
- Purpose limitation
- Data minimization
- Accuracy
- Storage limitation
- Integrity and confidentiality
- Accountability
Legal
Fairness and transparency.
Fairness and transparency are core to how we conduct business with our customers. We are committed to clear, honest agreements that protect your organization and your people.
Questions about our legal framework?
Our team is happy to walk you through our agreements, data processing addenda, and compliance documentation.