Profiden

Security

How we protect your data

Profiden handles sensitive candidate and business information. This page describes our security and privacy practices in plain language — what we do today and how we continue to improve.

We do not claim third-party certifications we have not earned. Our focus is practical controls that support background verification workflows and India's data protection expectations.

Protect data

Sensitive fields are encrypted in transit and at rest. Access to production systems is limited to people who need it for their role.

Control access

Role-based permissions in the admin and organization portals. Strong authentication for staff accounts.

Stay accountable

Key actions in the platform are logged so teams can review who did what and when.

Respect privacy

Consent capture, purpose limitation, and retention settings designed around the DPDP Act and your policies.

Security practices

Defence in depth

How we build and operate the platform. Details may evolve as we grow — contact us if you need something specific for a vendor review.

Encryption

Connections to Profiden use HTTPS. Sensitive stored data is encrypted. We avoid keeping more personal data than each check or workflow requires.

Application security

Secure coding practices, reviewed releases, and fixes prioritized by severity. We do not publish internal hosting or network details on this page.

Access & authentication

Authenticated sessions for customer and internal users. Role-based permissions so people see only the cases and settings they need.

Logging & monitoring

Significant platform activity is logged for troubleshooting and accountability. We use alerts to spot unusual patterns and improve over time.

Data location & retention

Services are operated for the Indian market. Retention and deletion follow your account settings and applicable law.

Incidents

If we learn of a security issue that may affect customer data, we investigate promptly and communicate with affected customers as appropriate.

Privacy policy

For how we collect, use, and share personal information, see our privacy policy.

Read privacy policy

Report a security concern

If you believe you have found a vulnerability, please email our team with enough detail to reproduce the issue. We appreciate responsible disclosure and will work with you in good faith.

[email protected]