Security Policy

All traffic to and from ProSculpt is encrypted in transit using TLS. We enforce HTTP Strict Transport Security (HSTS) so browsers only ever connect over HTTPS, and we apply a strict Content-Security-Policy (CSP) together with modern protective headers (such as anti-clickjacking, MIME-sniffing protection and a strict referrer policy) to harden the application against common web attacks.

Personal data is encrypted at rest in our managed database and object storage. Sensitive files (such as resumes and proctoring recordings) are held in private storage that is never publicly listable.

Passwords are never stored in plain text. They are protected using bcrypt one-way hashing, so we cannot read your password and neither can anyone who might gain access to stored data. API keys are stored only as hashes, and all provider secrets are held in a secured environment, never in our source code.

Access to data is governed by role-based access control and least-privilege principles: users and staff can reach only the data their role requires. At the database layer we enforce row-level security, so every query is checked against who is asking for it.

For our assessment platform, each customer organisation operates in a strictly isolated tenant with a deny-by-default policy, so one customer can never see another customer's data. Attempts to cross those boundaries are detected and logged.

Resumes, identity photos, proctoring snapshots and report PDFs are not served from public links. Instead, access is granted through short-lived, signed URLs that expire shortly after they are issued, so a link cannot be reused or forwarded indefinitely to reach private files.

We maintain a tamper-evident audit trail of sensitive actions (for example viewing a profile or resume, exporting data, role changes and account deletions), recorded with context such as time and origin. Consent records are kept in an append-only ledger that cannot be silently altered, giving a reliable history of the choices you have made.

We run continuous error monitoring with automated scrubbing designed to keep personal data out of diagnostic logs, and we track usage of third-party AI services for accountability.

Sessions are hardened and tokens are revoked on logout or account deletion. Candidate assessment access is time-bounded and tied to single-use invitations. We additionally apply rate limiting, CSRF protection, input sanitisation, upload validation and signature verification on incoming webhooks to defend against abuse.

Security and privacy are designed in from the start. You can export or delete your data on request; deletion cascades across our database and file storage, including resumes and proctoring imagery. We run automated retention purges so data is not kept longer than needed. See our Data Retention schedule for the details. Consent is granular and can be withdrawn at any time.

We maintain a defined incident-response process. In the event of a personal data breach, we act promptly to contain and mitigate it, assess the impact, and notify affected individuals and the relevant authorities without undue delay where required by law, describing the nature of the incident, its likely consequences, and the steps taken in response.

We rely on a small set of vetted service providers to deliver ProSculpt. Each is required to protect your data and process it only on our instructions. Some processing (notably certain AI features) occurs outside India; we disclose this transparently. The current list is published on our Sub-processors page.

No method of transmission or storage over the Internet is completely secure, and security is a shared responsibility. You can help protect your account by using a strong, unique password, keeping your credentials confidential, and signing out on shared devices.