Security

skilldeo handles sensitive candidate and recruiter data — including video interviews, transcripts, scores, and proctoring signals. Protecting that data is a core part of how we build and operate the platform.

This page summarises the technical and organisational measures we use to keep your data secure. It complements our Privacy Policy, which explains what data we collect and why.

• All data is encrypted in transit using TLS/HTTPS.
• Data at rest — including video and audio recordings, transcripts, and scores — is encrypted on our storage infrastructure.
• Access to encryption keys is restricted to authorised systems and personnel.

• Platform access is protected by OTP-based authentication.
• Candidate data is accessible only to authorised users within the recruiting organisation that invited the candidate.
• We follow the principle of least privilege — internal access to production data is limited to the minimum required to operate and support the Service.
• Access is reviewed periodically and revoked when no longer required.

Our infrastructure is hosted on enterprise-grade cloud services with built-in redundancy, network isolation, and regular security patching. We rely on providers that maintain recognised security certifications for their data centres.

To help recruiters assess the authenticity of an interview, skilldeo monitors 6 integrity signals during a video interview:

• Eye Detection — whether the candidate maintained screen focus.
• Tab Switch Status — whether the candidate navigated away from the interview tab.
• Additional Person — whether a second person appeared on camera.
• Scripted Voice — whether the voice detected appears synthetic or AI-generated.
• Out of Screen — whether the candidate left the camera frame.
• Pause Detection — whether unusually long pauses occurred before answering.

These signals are presented as Pass, Fail, or Review flags to support — not replace — human review.

We do not store payment card details. All payments are handled by a PCI-compliant third-party payment provider, so sensitive cardholder data never touches our servers.

We retain data only for as long as necessary to provide the Service and meet legal obligations. Candidate interview data is retained according to the recruiter's data retention settings, with a default of 12 months from the interview date.

Deletion requests are processed within 30 days. For full details, see the retention and rights sections of our Privacy Policy.

We monitor our systems for unusual activity and apply security updates promptly. Our infrastructure undergoes regular security reviews to identify and address potential vulnerabilities.

We use a limited set of trusted third-party providers to operate the platform — including cloud hosting, payment processing, and email delivery. These providers are contractually required to protect your data and may not use it for their own purposes.

We welcome reports from security researchers. If you believe you have found a security vulnerability or that data may have been compromised, please contact us immediately and give us a reasonable opportunity to respond before public disclosure.

Report security issues to social@skilldeo.ai. We will acknowledge your report and work with you to resolve the issue.

For any security-related questions or concerns, please reach out: