Trust center
How we handle your data, who we rely on, and how to report a vulnerability — in writing, not slogans.
Data handling
- Your workforce data stays inside your perimeter — the platform is air-gapped by design, with read-only connectors and no mandatory egress.
- Raw personal identifiers are pseudonymised with keyed HMAC before storage; re-identification keys never leave your environment.
- Aggregate outputs apply suppression thresholds before anything is displayed — small groups are never exposed.
- Retention follows your rules: you control what is kept, for how long, and every deletion is auditable.
Agreements & documents
- Data Processing Agreement (DPA) — standard GDPR Art. 28 terms, available on request.
- Sub-processor list — Cloudflare (site hosting, EU region), Brevo (transactional email). Updated here before changes take effect.
- Responsible disclosure — report vulnerabilities to security@workforceobservatory.com. We acknowledge within 2 business days and never pursue good-faith researchers.
- security.txt — machine-readable contact at /.well-known/security.txt.
How we build trust into the product
Security on this platform is architectural, not contractual: every metric carries a lineage you can audit, every definition is versioned and immutable, every access is deny-by-default. The same discipline applies to this website —
and to how we talk about ourselves. If we cannot evidence a claim, we do not make it.
Due-diligence questions?
We answer security questionnaires directly — send yours and we will respond within three business days.