Your Trust is Our Foundation.

At TalentCafe, we've engineered a fortress of security to protect your data, so you can focus on what matters most: your growth and success.

A Multi-Layered Approach to Security

We've woven security into the very fabric of our platform. Explore the pillars of our protection.

End-to-End Encryption

Your data is protected with military-grade AES-256 encryption, both in transit and at rest.

Multi-Factor Authentication

Add an extra layer of security to your account with MFA via SMS, email, and authenticator apps.

Secure Global Infrastructure

Built on Google Cloud Platform, a world-class infrastructure with SOC 2 Type II and ISO 27001 compliance.

Privacy by Design

Our systems are designed with data minimization and purpose limitation in mind, ensuring we only collect what is necessary.

Granular Access Control

Role-based access control ensures that you have complete control over your data. You decide who sees what.

Continuous Security Audits

We conduct regular penetration testing and vulnerability assessments to proactively identify and address potential threats.

Under the Hood

For those who love the details, here’s a closer look at our security architecture.

All data exchanged with our platform is encrypted using TLS 1.3, the latest and most secure protocol. We enforce HSTS to ensure browsers only connect to our servers over HTTPS, and we utilize Perfect Forward Secrecy (PFS) to protect past sessions from being compromised even if a private key is stolen in the future.

Your data is stored in databases encrypted with the AES-256 standard. This includes all your personal information, messages, and files. Our database servers are isolated in a private network, and access is strictly limited to authorized personnel. We also perform regular, encrypted backups to ensure data integrity and availability.

We follow secure coding best practices to prevent common vulnerabilities such as SQL injection, cross-site scripting (XSS), and cross-site request forgery (CSRF). Our code is regularly scanned for security issues, and we have a bug bounty program in place to encourage responsible disclosure of any potential vulnerabilities.

Committed to Global Standards

We adhere to the most stringent global privacy and security standards.

GDPR

General Data Protection Regulation

Compliant

Continuous data privacy audits and active encryption protocols.

CCPA

California Consumer Privacy Act

Compliant

Granular data controls, sovereignty options, and privacy controls.

SOC 2 Type II

Service Organization Control 2

Type II Ready

Technical safeguards implemented, immutable logs, and SOC 2 Type II readiness standards.

ISO 27001

Information Security Management

Audit Ready

Technical control checklist active. External certification planned Q3 2026.

HIPAA

Health Insurance Portability and Accountability Act

Compliant

BAA available with E-SIGN digital signatures, audit logs, and zero-knowledge storage.

Responsible AI & Data Safety

We are committed to building AI that is safe, ethical, and unbiased. Your data is your data, and we are committed to keeping it that way.

Ethical AI

We are committed to the responsible development and deployment of our AI systems. Our AI is designed to be a helpful and unbiased tool for both coaches and clients. We continuously monitor our models for performance and fairness.

Data Privacy

Your data is never used to train our AI models without your explicit consent. We believe in data minimization and only collect what is necessary to provide our services. You have the right to access, rectify, and erase your data at any time.

Security Documentation

Security Questionnaire

Pre-filled security questionnaire for procurement and enterprise buyers

Updated Dec 2024
18
Questions Answered
SIG
Lite Compatible
CAIQ
Lite Compatible
6
Categories

Covered Categories:

Data Security & Encryption
Access Control & Authentication
Compliance & Certifications
Incident Response & Business Continuity
Vulnerability Management
AI & Data Privacy

Designed For

  • • Procurement and vendor management teams
  • • Enterprise IT security assessors
  • • Compliance officers conducting due diligence
  • • Legal teams reviewing vendor security posture

Need a custom questionnaire or have specific security questions? Contact our security team

Welcome to the Trust Center

Have questions or want to learn more about our security practices? Our team is here to help.