Security & Data Protection

Assessments are designed to avoid collecting unnecessary sensitive identifiers. We explain categories of data on the Data & Privacy page.

• HTTPS for data in transit.
• Access controls and role separation for administrative functions.
• Database hosting with industry-standard provider security features.
• Payment card data handled by Stripe — not stored on KinClarity servers.

• Environment secrets managed outside source control.
• Structured logging that avoids sensitive answer content where possible.
• Incident response procedures for suspected data issues.

KinClarity describes practical safeguards only. We do not claim ISO 27001, SOC 2, Cyber Essentials, regulatory endorsement, official government partnership status, or professional endorsements unless formally achieved and published here with evidence.

No security programme eliminates all risk. Users should protect their own devices, email accounts, and assessment links.