TRUST & SECURITY
People data deserves
clear rules and responsibilities.
Who handles which information, and why? Review our certification, access scope and data practices.
Discuss security requirementsISO/IEC 27001:2022
Certified
- Certified entity
- PLUS IMPACT Pte. Ltd.
- Scope
- Development of software, web applications, APIs and AI-related systems
- Certificate no.
- SG62538E
- Valid until
- 5 April 2029
Certification covers information security management. It does not certify the accuracy of individual AI evaluations.
The right information,
for the right people.
Review access and sharing according to each person’s role and purpose.
Administrators
Overall management
Team & managers
Hiring and evaluation
Individuals
Their own information
| Product | Information and access considerations |
|---|---|
| Smart Filter | Application documents, structured experience and job requirements. Review who can access candidate information and for what purpose. |
| Interview | Interview answers and evaluation evidence. Review access to recordings, reports and exports. |
| Personality | Response patterns and insights into work preferences. Results alone should not determine hiring or placement. |
| Talk | Distinguish employee and manager information. Confirm sharing scope for Talk administrators, direct managers and employees. |
Clear handling, from collection to deletion.
Collection
Purpose and explanation
Processing
AI and external providers
Access & sharing
Roles and access scope
Retention
Retention period and location
Deletion
Requests and conditions
Retention and deletion conditions depend on the product, contract and operating requirements. Agree on responsibilities before informing candidates and employees.
AI provides the evidence.
People make the final call.
Review AI summaries and evaluations alongside the original answers and documents. Your team makes hiring, placement and people-management decisions.
Model training and data use
Our API-based processing is designed on the premise that customer data is not used to train AI models. Processing providers, features and contractual conditions can be reviewed before implementation. Please refer to the privacy policy and your individual contract.
Read our privacy policyFAQ
Frequently asked questions
Answers to common security questions.
Which entity and activities are certified?
The scope covers software, web application, API and AI-related system development by PLUS IMPACT Pte. Ltd., as defined in the certificate and its validity period.
Can we review retention and deletion conditions?
Yes. We review retention periods, deletion scope, request contacts and confirmation procedures according to the products, contract and operating conditions.
Can you help with our security questionnaire?
Send your security questions and contractual requirements through the inquiry form. We will review the scope and respond.
Get the information you need before you start.
Talk to us about security questionnaires and contract requirements.
Discuss security requirements