Security & trust
Understanding an organisation comes with responsibility
Protu handles sensitive information about people, teams and how organisations work. We protect that information carefully, limit how it can be used and make clear the safeguards behind it.
Protection starts with the product
Security isn’t only about where information is stored. It also depends on what the product allows, who can access it and where limits are enforced.
Protu informs, never decides
Every read supports a human decision. Protu never gates an opportunity, automates a call, or replaces judgement. Aligned with GDPR Article 22. We refuse to overclaim
Confidence means signal strength, not a probability of success. Where the data is thin, Protu says less rather than inventing, and a built-in guard blocks output that strays into ranking or appraisal. Everyone sees their own read
Each person who completes a conversation sees their own read and can respond to how well it lands. No one sees another person’s. No surveillance, no performance scoring
Protu reads behavioural patterns, not performance. It is never used for monitoring, ranking employees, or compliance enforcement. One organisation never sees another
Your organisation is isolated from every other at the data layer. Cross-company access is blocked, and attempts are logged. Protu staff access, only under support
Any access by Protu staff requires your authorisation and is limited to support. Every support session is recorded in an immutable audit trail. The fundamentals, done properly
Encryption, access controls and infrastructure security, with clear documentation of the safeguards in place.
Encryption
TLS 1.3 in transit and AES-256 at rest, with HSTS enforced across the application. EU data residency
Data is stored and processed in the EU, hosted on DigitalOcean, with file storage on AWS S3. Authentication
Two-factor authentication for workspace accounts, and passwordless magic links for employees and candidates. Brute-force lockout, idle-session timeout, and session regeneration at every login. Access controls
Role-based access on least privilege. Sensitive reads, such as viewing insights, are recorded in an immutable audit log, aligned to ISO 27001 A.8.15. Hardened by default
Security response headers, strict transport security, and PII scrubbed from logs and error reporting. Backups and recovery
Daily database backups with 7-day point-in-time recovery, held separately from production. Clear about our security commitments
We distinguish between the safeguards Protu operates, the standards we’re working towards and the certifications held by our infrastructure providers.
UK GDPR
Collected for a stated purpose and processed under UK GDPR. Data-subject requests (access, correction, deletion) are handled on request, and DPAs are available. Data handling
We never sell your data, and never use identifiable data to train models. Anonymised, aggregated patterns help improve Protu’s models, and you can opt out. Analytics retention is enforced automatically. Human oversight
No automated decision-making. Sensitive-read logging aligns to EU AI Act Article 12, and the model is never a sole basis for a decision about a person. Aligned, not self-certified
Our posture aligns with ISO 27001 A.8.15 and EU AI Act Article 12, and our own ISO 27001 certification is in progress. SOC 2, ISO 27001 and PCI DSS are held by our infrastructure providers, not claimed by Protu. Need security documentation or have a question about how Protu handles data?
Contact us