Clients trust us with confidential plans, and candidates trust us with their careers. We protect that information with the same care as a much larger firm.
Our controls
- Multi-factor authentication on all business systems and email.
- Encryption of devices, and of data in transit and at rest with our cloud providers.
- Access to candidate and client data limited to those who need it.
- Automatic security updates and anti-malware on all devices.
- Regular, tested backups.
- Secure deletion of data at the end of its retention period.
Suppliers
We use established cloud providers with strong security standards, and bind each one to data protection terms.
This website
This site is served over HTTPS, has no login, no forms, no JavaScript and no database, which keeps its attack surface very small.
Incidents
We have a documented incident procedure and will meet our breach notification duties under the UK GDPR.
Reporting a vulnerability
If you believe you have found a security issue, please email enquiries@kleboe.co.uk. We are grateful for responsible disclosure.