NWTS

Home / Security

Security and your data.

Workforce plans are sensitive. Here is exactly how we protect them, in plain language, with nothing overstated.

Your data is walled off by company

Every DecisionIQ workspace, Academy record and CareerIQ account is isolated by access rules enforced inside the database itself, not only in the interface. One customer cannot read another customer’s data, even through a direct request.

Encrypted in transit and at rest

Every page and app connection uses HTTPS, and browsers are told to refuse unencrypted connections to this site. Our database and hosting providers encrypt stored data at rest.

We never see your card

Payments are handled by Stripe. We receive your billing status and the last four digits of your card, never the full card number.

Passwords

Passwords are stored only in hashed form by our authentication provider, and passwords known to have appeared in public data breaches are rejected at sign-up.

Your numbers never go to AI

DecisionIQ’s calculations are fixed formulas, published on our How it works page. Your scenarios, assessments and briefs are never sent to an AI service or used to train AI models.

Where AI is used, and how

CareerIQ, Ask NWTS support answers and Academy feedback use an AI model from Anthropic. Only the text needed for that answer is sent, and under Anthropic’s commercial terms it is not used to train models. These features are labeled as AI-assisted.

Backups and monitoring

The database is backed up daily by our database provider. The site and apps are checked automatically every hour, and the owner is alerted by email if a page stops loading or errors spike.

Export and deletion

You can delete scenarios, assessments and briefs at any time, and export scenarios to a spreadsheet. A workspace owner can delete the whole workspace. CareerIQ members can export or permanently delete their data from settings.

Privacy-respecting analytics

We use no advertising or tracking cookies, do not store IP addresses, and record nothing when your browser sends a Do Not Track or Global Privacy Control signal.

Who processes data on our behalf

  • Supabase: database and sign-in, hosted in the United States.
  • Vercel: website hosting.
  • Stripe: payments.
  • Zoho: email.
  • Anthropic: the AI model for CareerIQ, support answers and Academy feedback.

What we don’t claim

NWTS does not currently hold SOC 2, ISO 27001 or other third-party security certifications, and we won’t imply otherwise. If your procurement process uses a security questionnaire, email it to us and we will answer it accurately.

Reporting a security issue

If you believe you’ve found a vulnerability, email stealn@nwtalentsolutions.com with the details. Please don’t access other people’s data or disrupt the service while testing. We will acknowledge your report and keep you informed.

See also our privacy policy and the live system status.