Enterprise-grade security and privacy, engineered into the GR8 People platform at every tier — from your data outward.
Detailed security documentation is shared with qualified prospects at the appropriate stage of the evaluation process. Data Privacy Framework certifications are viewable on the U.S. Department of Commerce DPF list.
The controls behind it — safeguarding your data, your candidates, and your uptime, every day.
Data is encrypted in transit and at rest. We use AES-256 with a unique key per customer for sensitive data, and TLS 1.2+ to protect every connection.
Built on AWS with a global footprint and multi-availability-zone redundancy at every tier — across regions in the U.S. and Europe.
Role-based access control, configurable by you. Multi-factor authentication is enforced on all access points, and every action is logged and monitored.
LDAP, SAML 2.0, and OIDC support let you federate sign-on to your own identity provider for seamless, centralized access management.
An active retention policy keeps data aligned to your configuration.
Our secure SDLC pairs static and dynamic code analysis with penetration testing, following OWASP Top 10 and CWE/SANS Top 25 standards.
Redundancy at every application tier, real-time health monitoring with self-healing, plus managed DDoS protection and a web application firewall keep the platform responsive.
Independent third-party vulnerability assessments run weekly, backed by endpoint threat detection and a documented, rehearsed incident response plan.
You decide how candidate and employee data is used. We only ever process it on your instructions.
You are the data controller; GR8 People is the processor. You retain full control of your data, roles, workflows, consent settings, and retention rules.
Certified under the EU-U.S. Data Privacy Framework, the UK Extension, and the Swiss-U.S. DPF, with third-party verification by TrustArc (formerly TRUSTe).
Privacy impact assessments, records of processing activities, employee privacy training, and configurable compliance features built into the platform.
Access, correct, or delete your information and opt out of marketing at any time. Reach our privacy team at privacy@gr8people.com.
Your data stays yours.