SkillXchange Security Policy
1. Overview
At SkillXchange, we are committed to safeguarding the privacy, security, and integrity of all data entrusted to our platform. We implement industry-leading security protocols to ensure that candidate information, employer assessments, and agency data are protected from unauthorized access, breaches, and misuse.
2. Candidate Security and Data Protection
SkillXchange prioritizes the control and security of candidate information, ensuring that personal and professional data remain private and protected.
Candidate Rights & Control
- Candidates retain full control over their personal information, test scores, and assessment results.
- Information is never shared with employers, agencies, or third parties without explicit candidate consent.
- Candidates can manage, update, or delete their data at any time through their account settings.
Data Security Measures
- All candidate data, including test scores and personal details, is stored using encrypted and secure databases.
- Access to candidate data is strictly limited to authorized users, ensuring confidentiality.
Account Access & Authentication
- SkillXchange enforces Double OTP Authentication for all candidate logins to prevent unauthorized access.
- Secure password policies and periodic security prompts are implemented to enhance account security.
- Candidates are notified of any suspicious activity or login attempts on their accounts.
3. Employer & Agency Security Protocols
Employers and agencies using SkillXchange benefit from a secure environment where proprietary information, assessments, and candidate interactions are protected.
Data Containment & Confidentiality
- Employer and agency accounts operate in a secured, isolated environment to ensure data integrity.
- Candidate data is never shared with other organizations unless explicitly approved by the candidate.
- Employer assessments, test results, and related scoring are kept confidential and are not visible to competing employers or agencies.
Ownership of Assessment Scores
- All assessment scores generated for a candidate under an employer’s or agency’s request remain the property of the originating employer or agency.
- SkillXchange does not share, repurpose, or redistribute employer-specific assessment results without consent.
- Employers and agencies have full discretion over how their assessment results are used within their organizations.
Access & Data Protection
- Employer and agency accounts are protected through multi-factor authentication (MFA).
- Any modifications to account permissions require administrative approval within the organization.
- Secure API integrations and encrypted data transfers are utilized for external systems or HR platforms.
4. Compliance & Security Standards
SkillXchange complies with industry security standards to ensure safe data handling and storage:
- Encryption: All sensitive data is encrypted both in transit (SSL/TLS) and at rest.
- Regulatory Compliance: Our platform aligns with GDPR, CCPA, and other data protection laws to ensure user privacy and rights.
- Routine Security Audits: Regular security reviews and third-party audits are conducted to identify and mitigate potential risks.
5. Incident Response & Support
In the event of a security breach or unauthorized access:
- Immediate investigations are launched to assess and contain potential risks.
- Affected users will be promptly notified with recommended security measures.
- A dedicated Security Support Team is available to assist with any concerns related to account safety.
For any security-related inquiries, please contact our Support Team at security@skillxchange.ai.
