In place today

• Authenticated accounts: every page with talent data requires sign-in.
• Per-organisation data separation enforced in the database, not only in the screen.
• Role-based access: managers see their direct reports, employees see their own record.
• Audit history of score changes and decisions; recorded decisions and audit entries cannot be edited.

Not yet in place

• No independent security certification (for example SOC 2 or ISO 27001) yet.
• No single sign-on (SSO) with company identity providers yet.
• No enforced multi-factor authentication yet.

Security questions

• Email contact@talentdecisionos.com.