Security

Built for HR data, not for experiments.

Candidate and employee data is some of the most sensitive data a company holds. RoleWise is designed around that from day one.

UK & EU GDPR by default

Lawful basis, retention periods and data subject rights are configured before you go live — not bolted on later.

EU/UK data residency

Candidate data is processed and stored in the UK or the EU. You choose the region at onboarding.

SOC 2 Type II

Independently audited controls covering security, availability and confidentiality.

Audit log on every assessment

Each AI observation is recorded with the evidence behind it, so decisions can be explained.

Human in the loop

RoleWise never rejects a candidate automatically. Insights are decision support, not a verdict.

Access control

SSO, role-based permissions and per-role visibility of candidate records.

Documentation on request

We provide our DPA, sub-processor list, penetration test summary and security questionnaire responses as part of procurement. Compliance+ adds an annual bias audit report for your board or works council.