Trust Center
What we do with your data, in one place.
This page lists our controls, our sub-processors, where data is processed and how AI is used. It describes practice, not certification: AssessIQ is not SOC 2 or ISO 27001 certified. The full legal text is on the privacy page and the DPA.
Controls
Controls in place today.
Access
Super-admins, company administrators and candidates each see only what their role allows. Sign-in uses an email one-time code or Google sign-in, with optional authenticator-app (TOTP) multi-factor authentication.
Tenant isolation
Each organisation works in its own tenant. The database enforces this with row-level security, so one organisation cannot see, search or export the data of another.
Audit log
Administrative actions are written to an append-only audit log. Administrators cannot change or delete log entries.
Encryption in transit
All traffic between candidates, administrators and AssessIQ uses TLS. Sign-in codes and session tokens are not stored in plain text.
Backups
AssessIQ keeps backups of the platform data, as the DPA states.
Answer keys
Correct answers are never sent to a candidate. Only administrator roles can read them.
More detail on the security page.
Sub-processors
Who processes data for us.
| Name | Purpose | Location |
|---|---|---|
| Hostinger | server hosting | Hosting provider of the virtual private server |
| Cloudflare | network proxy and security | In front of the server |
| Brevo | transactional email | Email delivery |
| optional sign-in with a Google account | Only if the user chooses Google sign-in | |
| Anthropic | AI-assisted evaluation of written answers, processed in the United States | United States |
Each sub-processor receives only what its service needs. None may use personal data for its own purposes. We give notice on the website before we add one.
Data location
Where data is stored and processed.
Assessment data, candidate records and attempt logs are stored in the platform database on a virtual private server operated by Hostinger, with Cloudflare in front of it. When written answers are evaluated with AI assistance, the answer text is processed in the United States, so that data leaves India for that purpose. Ask us before you sign up if you have data-location requirements.
AI
How AI is used for written answers.
- —Written answers are sent to Anthropic through its API for evaluation. We send the answer text with the question and the rubric. We do not send candidate names or email addresses.
- —AssessIQ staff start each evaluation by hand. Nothing runs in the background.
- —A person can review each result, and results are reviewed before release to the hiring organisation. An AI score is advice. The organisation decides.
- —Under Anthropic's commercial terms, Anthropic does not use this content to train its models (terms checked 1 November 2026).
Documents and contact