Organization data isolation
Every query is scoped to your organization server-side — enforced at the database layer, not just hidden in the interface.
Built to be trusted with sensitive hiring data.
Evalynq handles identity documents, proctoring evidence, and candidate submissions — data that deserves real controls, not just a privacy-policy promise. Here's what's actually enforced today, and where to find the full legal detail behind it.
Verified controls
What's actually enforced.
Private file storage
Identity documents, proctoring evidence, and candidate submissions are never public. Access is exclusively through short-lived, signed links generated on demand, and every view is logged.
Role-based access
Admins, reviewers, and viewers see only what their role and assignment allow. Reviewers are scoped to the recruitments they're explicitly assigned to, not the whole organization.
A full audit history
Sensitive actions — score changes, evidence views, result releases, team changes — are recorded in a searchable, exportable audit log.
Configurable retention
Evidence, identity documents, candidate files, and CVs are deleted automatically once your configured retention period elapses — enforced at the storage layer, not just hidden from view.
Encrypted in transit
All traffic to Evalynq is served over HTTPS.
Advisory signals, never automatic decisions.
Optional webcam or screen-share monitoring, where an organization enables it, produces factual events and an advisory concern score — never an automatic accusation. Optional AI-assisted grading only ever suggests a score for a human reviewer to accept, adjust, or reject; nothing is written to a candidate's record without an explicit human action, and no hiring decision is ever made automatically.
Full legal detail
The documents behind these controls.
Each of these goes further than this page — read them for the complete picture.
Privacy Policy
What we collect, why, sub-processors, and international transfers.
Data Processing Agreement
Security measures, sub-processors, breach notification, and deletion commitments.
Proctoring Consent Policy
Exactly what monitoring does and doesn't do, and how candidate consent works.
Candidate Privacy Notice
What a candidate is told about their own data.
Terms of Service
The agreement governing use of the Service.
Acceptable Use Policy
What a customer organization may not do with the Service.
Talk to us about your security requirements.
If your organization has specific compliance or security questions, we're glad to answer them directly.