Security
Your safety, our priority
Protected data, worry-free use: how we keep your information safe
At HRorganizer, your security is paramount. We understand that protecting sensitive data is paramount. That’s why we deploy security technologies and protocols to ensure that your personal and company information is always secure.
From encryption to real-time monitoring, we take every step to ensure the integrity of your data. Rely on us for a worry-free experience, knowing that your data is in good hands with us.
NEN 7510
99.98% uptime since 2013
ISO 27001 certified
Information security certification
HRorganizer commissioned an Information Security Management System in 2021.
Every year we are audited by Noordbeek Certification and may call ourselves ISO 27001 certified.
Processing Activities
The General Data Protection Regulation (AVG) states that, as a data processor, we are expected to provide an overview of processing activities:
Whose data? From our customers, and the individuals engaged by our customers
What data. Name, e-mail address, responses to structured
questionnaires, tests, and third-party feedback. In addition
gender, age and country of origin, and data on
knowledge and experience, such as education and work experience.
For what reason? Providing selection and development tools.
With what legal basis? Execution of agreements with our clients.
With which third parties? See the list of subcontractors below.
How long is it kept? At the latest while the agreement is in place. Customers can remove
themselves earlier with simple tools in the
platform.
How do we keep it safe? See the list of measures below.
Subcontractors
We work with the following parties to provide a secure and reliable platform:
- Microsoft (Azure platform)
- Aon assessment services (questionnaires and tests)
- Twilio Sendgrid (sending e-mail)
- Amazon and Transip (DNS & domain registration)
- Openai, Anthropic, Cohere (use large language models)
- Langsmith (monitoring use large language models)
Recovery time and recovery point
In the event of a disaster, such as the burning down of a data center, we use the following recovery objectives:
- Within 4 hours, our platform will be available again (Recovery Time Objective : 4 hours).
- The maximum amount of data we lose is 15 minutes (Recovery Point
Objective: 15 minutes).
Measures
Security and reliability are taken into account at all levels. A so-called greybox penetration test is conducted annually by an independent research firm. The latest verdict of this party was that our security is strong. Recommendations from the pen tests are always followed.
User level
- Secure access with personal access data. This is stored encrypted in our system and therefore not known to us.
- Strict automated procedure for restoring access when the password is lost.
- Two factor authentication is available by default
Mobile and Web Application Level
- Fully secure connection (https, ssl).
- All data is stored pseudonymized. Only the application and 3 IT employees of HRorganizer have access to the key.
- Database and backups are continuously encrypted (with so-called Transparent Data Encryption)
- Designed to strictly segregate licensee data.
- Designed to resist all known attack methods (e.g. sql injection).
- Monitoring availability and performance both internally and externally.
- 99.8% guaranteed availability.
Level of infrastructure
- This is in the trusted hands of Microsoft (Microsoft Azure)
- It is certified under ISO/IEC 27001 guidelines, among others.
- Meet the highest requirements with respect to:
○ Physical security
○ Availability
○ Compartments and boundaries
○ Network architecture
○ Databases
○ Operational management
○ Monitoring
○ Integrity
○ Data security - Data are in the West Europe data center which is located in the Netherlands.
- An online backup is stored in North Europe (Northern Ireland).
- Services and (virtual) machines are only accessible through a VPN connection.
- Meet the highest requirements with respect to: