Privacy, Security, and Data Protection
How Clariantix protects customer data, assessment evidence, and report content across the platform lifecycle.
Data Encryption
All data is encrypted in transit using TLS and at rest using strong, industry-standard algorithms. Encryption keys are managed under documented controls.
Access Controls
Role-based access controls and least-privilege principles govern every customer workspace. Administrative access to customer data is restricted, logged, and reviewed.
Evidence Protection
Evidence files uploaded into Clariantix are scoped to the customer's organization, isolated by row-level security, and never used for model training.
Customer Confidentiality
Clariantix does not share customer assessment data, evidence, or reports outside the customer's organization without explicit, recorded consent.
Assessment Isolation
Each customer's assessment data, evidence, and reports are isolated from other tenants at the storage and application layer.
Report Access
Authorized users can access and download organization-specific reports. Additional external-sharing controls are not currently configured.
Retention Policy
Customer data is retained according to the customer's contract and configured retention policy. Deletion requests are honored end-to-end across primary and backup systems on documented timelines.
Platform Security Principles
Clariantix uses organization-scoped access controls and documented security practices. References to ISO 27001 and SOC 2 describe framework alignment goals and do not claim certification.