SkillCort Trust Center
Security & privacy
How SkillCort approaches privacy-by-design, data separation, access, retention and backups — stated only within what is verified today.
Privacy by design
SkillCort is designed with privacy-by-design controls informed by GDPR and KVKK principles.
Data separation
Workspaces and tenant data are separated so one organization's data is not exposed to another.
Access controls
Access uses role-based, least-privilege defaults. Sensitive implementation details are not published here.
Encryption
Candidate and client data is encrypted in transit and at rest.
Audit and version history
Score, decision and governance changes are recorded, with append-only history for outcomes and exportable audit packs for review and audits.
Proctoring media
Camera, screen, and microphone capture are each turned on per assessment by the organization and disclosed to the candidate on the consent screen before the exam starts — nothing is captured unless the organization enables it. A reviewer can also ask AI to help scan an assessment's webcam images and point to frames worth a closer look; this runs in reviewer context only — it starts when a reviewer opens the session for review, never runs unattended, and never makes or changes a decision. It uses an established third-party AI provider.
Retention
Per-workspace media-retention windows are enforced for camera, screen, microphone and identity-capture media, reference-photo versions used in review, and integrity-signal events. Non-media assessment and identity-review records follow the separate assessment-data window. Both schedules run automatically; the defaults are 90 days for proctoring media and 24 months for assessment records.
Backups
Backups run daily. Extended point-in-time recovery is not currently enabled.
Subprocessors
Legal documents
SkillCort's Terms of Use, Privacy Policy, Data Processing Addendum, Cookie Policy and subprocessor list are published and in force.
Security contact
To report a security concern, email support@skillcort.com. For privacy and data-protection requests, write to privacy@skillcort.com.
More in the Trust Center
- AI GovernanceWhere SkillCort uses AI, and where AI does not have final ownership.
- Human Decision ControlPeople own assessment outcomes; AI outputs stay advisory.
- Candidate RightsWhat the candidate experience is today, described honestly.
- AccessibilityThe accessibility target and current state, without overstating conformance.
- Governance ReportA sanitized, versioned report of verified controls and documented limitations.
Public Trust Statement v1.14.0 · source governance manifest v1.15.0 · last verified 11 September 2026 · Closed with documented limitations.