Encryption
TLS for all data in transit. Industry-standard encryption for data at rest, including candidate personal data.
Workspace isolation
Each customer's data is separated by row-level security in the database, so one workspace cannot read another's records.
Role-based access
Custom roles with module-level permissions. Recruiters can be limited to assigned roles, and client users never see internal data.
Audit logging
Record changes, stage moves, permission changes and automated actions are logged with user and timestamp.
Infrastructure
Monitored cloud infrastructure with regular backups and disaster recovery procedures.
Your data stays yours
Export everything at any time. We do not sell your data or your candidates' data.
AI and your data
How AI handles candidate data
- AI runs only when a user triggers parsing, scoring or a document, and each action is recorded.
- Matching across your talent pool uses System Match, which does not send data to an AI provider.
- AI requests go through our own orchestration layer with fixed schemas and no open-ended chat.
- AI output is advisory. It never changes a candidate's stage or contacts anyone.
Questions about AI providers or data processing locations can be answered as part of your security review. Contact us.
Compliance
GDPR and data processing
You act as data controller for candidate data in your workspace, and we process it on your behalf. Fortemap is designed with GDPR, PDPA (Singapore, Malaysia), UAE PDPL and India DPDP requirements in mind.
Responsible disclosure
Found a vulnerability?
Please report it to contact@fortemapai.com with steps to reproduce. We will acknowledge your report promptly and keep you updated while we fix it. Please do not access or change other customers' data while testing.
Questions
Security questions
How does Fortemap help with GDPR?
Fortemap is designed with GDPR, PDPA (Singapore, Malaysia), UAE PDPL and India DPDP requirements in mind. It gives customers the tools they need to meet their own GDPR obligations, including data export, correction and deletion, role-based access and audit logs. We process candidate data as a processor under a data processing agreement.
Is our data separated from other customers?
Yes. Workspaces are isolated with row-level security in the database.
Can we complete a security questionnaire?
Yes. Send it to contact@fortemapai.com or through the contact form.