Trust
Security, privacy and governance
SkillsOps handles sensitive workforce, capability and financial data. This page describes the controls we operate to keep that data protected, isolated and governed. It is maintained by SkillsOps and is not an independent certification.
Tenant isolation by design
Every organisation's data is logically separated. Access is scoped to organisation membership, so customers and advisory clients never see each other's workforce data.
Row-level access control
Access is enforced in the database with row-level security policies, not only in the application. Permissions follow roles such as owner, administrator, modeller and reviewer.
Encryption in transit and at rest
Traffic is served over TLS, and data is encrypted at rest by our managed cloud infrastructure.
Least-privilege secrets
Privileged operations run server-side with scoped credentials. Secret tokens are never exposed to the browser or to regular application users.
Governance and auditability
Decisions, reviews, approvals and changes are recorded with provenance so that recommendations remain explainable and traceable.
Controlled collaboration
Cross-organisation collaboration is governed by explicit, revocable access grants with expiry, so sharing stays intentional and time-bound.
Data protection
We collect only the data needed to deliver workforce intelligence and decision support. Customer data is processed to provide the service and is not sold.
- Data scoped and isolated per organisation
- Access governed by role-based permissions
- Encryption in transit (TLS) and at rest
- Privileged actions restricted to server-side execution
Privacy
Account and contact details are used to operate the service and to communicate with you. Marketing communications include an unsubscribe option, and we honour data access and deletion requests in line with applicable law.
- Clear purpose for the data we hold
- Unsubscribe controls on outbound email
- Access and deletion requests supported
- No sale of customer data
Contact
Reporting a concern
If you have a security or privacy question, or wish to report a vulnerability, contact us at security@skillsops.ai. We aim to acknowledge reports promptly and keep reporters informed.
Want to discuss security in detail?
We are happy to walk enterprise and advisory teams through our controls.