Security at Quali5d

We take the security of your recruitment data seriously. Here's how we protect it.

SSL Labs Rating: A

Assessed by Qualys SSL Labs — May 2026

TLS 1.3TLS 1.2Forward Secrecy: RobustHSTS EnabledOCSP Stapling

View full report →

Infrastructure

✓Hosted on Microsoft Azure
✓SOC 2 Type II certified data centres
✓Azure App Service isolated environment
✓PostgreSQL with encrypted connections
✓Azure Blob Storage with private containers

Encryption

✓TLS 1.3 for all data in transit
✓AES-256 encryption at rest
✓Forward Secrecy: Robust
✓Passwords hashed with bcrypt
✓JWT tokens with expiry

Application Security

✓OWASP ZAP scanned — no critical findings
✓Security headers (CSP, HSTS, X-Frame)
✓Role-based access control (RBAC)
✓API docs disabled in production
✓No sensitive data in logs

Vulnerability Scan Results

POODLE (SSLv3)Not vulnerable

POODLE (TLS)Not vulnerable

HeartbleedNot vulnerable

BEAST attackMitigated server-side

ROBOT vulnerabilityNot vulnerable

TicketbleedNot vulnerable

OpenSSL CVE-2014-0224Not vulnerable

OpenSSL Padding OracleNot vulnerable

GOLDENDOODLENot vulnerable

Zombie POODLENot vulnerable

OWASP Top 10No high/critical findings

SSL/TLS compressionDisabled

Data Retention & Deletion

Audio & Video Recordings90 daysPermanently deleted after 90 days

Transcripts & AI DocumentsSubscription + 30 daysDeleted within 30 days of account closure

Billing Records7 yearsRequired by tax law

Usage Logs12 monthsThen anonymised and aggregated

Incident Response

In the event of a data breach affecting your data, we will notify you within 72 hours of discovery as required by GDPR. Contact our security team at admin@uni5d.ai