How we protect your data

Interview data and backups are stored with established cloud providers, encrypted at rest, and access to them is restricted and logged. We serve customers worldwide; enterprise customers can ask which region their data is stored in.

• In transit: every connection is encrypted, including the candidate’s device check.
• At rest: all stored data and backups are encrypted.
• Credentials and keys are stored encrypted and access to them is restricted.

• The service is protected against common web attacks and denial of service.
• Administrative access is restricted, requires two-factor authentication and is logged.
• Data is backed up regularly, and restoring from backup is tested.

• Sign-in with a company email address only.
• Organizations are tied to verified company domains. Admins choose how colleagues join.
• Role-based access: interviewers see only the interviews they are assigned to.
• Sensitive changes require a recent sign-in. Share links expire.

• Access to candidate personal data is granted only for a specific support request, for a limited time.
• Every staff action on your organization is recorded in your own audit log, where your admins can see it.

• No installation and no administrator rights.
• Never captures the screen, keystrokes, files or browsing history.
• Tells the candidate what is checked and what is never collected before they consent.
• Stops when the interview ends and removes itself. The full call audio is never stored; only short clips around a signal are kept.

Payments are processed by Razorpay, an RBI-authorised payment aggregator. Card, UPI and bank details are entered on Razorpay's checkout and never reach Polar Integrity.

• Logs and error reports have personal data removed before they are stored.
• The service is monitored around the clock for outages and unusual access.
• If a personal data breach affects your organization, we will notify your admins without delay, with what happened, what data was involved and what we are doing about it.

Polar Integrity does not yet hold SOC 2 or ISO 27001 certification. For a security review, we complete your questionnaire and share architecture and control details under NDA. Write to [email protected].

Write to [email protected] with the details and steps to reproduce. We acknowledge every report and ask that you do not access other customers' data or disrupt the service while testing.