Skip to content
Security

Your information,protected in every assessment.

We protect the information of organizations and of every person assessed with a certified security management system, regulatory compliance and transparent AI.

Privacy policy
  • GDPR
  • EU Cloud
  • ISO 27001
  • EU AI Act
Security and compliance.

Enterprise-grade security.From day one.

ISO27001

International standard.

The Delta platform’s Information Security Management System is certified to the ISO/IEC 27001 standard and audited periodically.

GDPRCOMPLIANCE

Privacy by design.

Compliance with the General Data Protection Regulation to protect the confidentiality of every person assessed.

CLOUDEUROPE

Data hosted in Europe.

Data and its replicas are hosted in data centers located in Europe, encrypted in transit and at rest.

EU AIACT

AI overseen by people.

Participants know when they are interacting with an AI, results are backed by evidence for each competency, and the final decision is always made by a person in the organization.

SERVICECONTINUITY

Always available.

Automatic backups, data replicas in Europe and an incident recovery plan.

SSOSINGLE SIGN-ON

Integrated with your organization.

Single sign-on with the client’s identity provider, two-factor authentication and role-based permissions.

ISO 27001 security policy

Our commitmentsto information.

Psicosoft’s management approves and leads our Information Security Management System, certified to the ISO/IEC 27001 standard. That is why we are committed to:

  • Confidentiality, integrity and availability

    Ensuring that information is only seen by those who should see it, that it is not altered and that it is available when needed.

  • Compliance

    Meeting our clients’ requirements and the legal requirements on information security, as well as those the organization subscribes to.

  • Risk management

    Identifying, assessing and controlling security risks, monitoring and tracking their levels.

  • Incident response

    Detecting and managing any security incident, informing affected clients without delay and applying the lessons learned to prevent it from happening again.

  • Trusted suppliers

    Working only with technology suppliers that meet high security standards, and monitoring them periodically.

  • Continuous improvement

    Setting and reviewing security objectives every year, training our team and continuously improving the management system.

Independent verification

We test our own security

  • Annual penetration test carried out by an external company.
  • Secure development aligned with OWASP and dependency review.
  • Continuous vulnerability scanning.
Your data

Transparent processing

  • Defined retention periods and deletion at the end of the contract.
  • Rights of the people assessed handled together with the client organization.

Frequently asked questions.

Who is the controller of the data of the people assessed?

The organization carrying out the assessment is the data controller. Delta Platform acts as data processor: it processes the data only in accordance with the controller’s instructions and under the data processing agreement required by Article 28 GDPR.

How do you protect the information on the platform?

With an Information Security Management System certified to the ISO/IEC 27001 standard, which defines the confidentiality, integrity and availability controls and is periodically reviewed and audited.

How is artificial intelligence used in assessments?

Only some tools, such as AI Challenge, use artificial intelligence. In those tools, participants know from the start that they are interacting with an AI, results are backed by evidence for each competency, and the organization must review each result before making a decision. AI-based tools are designed in accordance with the EU AI Act, and we provide each client with the documentation they need for their own compliance.

Can the people assessed exercise their rights over their data?

Yes. They can contact the organization that invited them to the assessment, and we give that organization the support it needs to handle each request for access, rectification, erasure or other rights.

Can we request security documentation to approve you as a supplier?

Yes. Write to us from the contact page, stating what your supplier approval process requires, and our team will send you the relevant documentation.

Trust center

Does your security team need more detail?

We share the documentation with your organization, under a non-disclosure agreement where appropriate.

  • ISO 27001 certificate
  • Architecture overview
  • Data processing agreement (DPA)
  • Sub-processors
  • Latest pentest summary

Need more information? Write to us at bs@psicosoft.com.

Security

Request the security documentation

Which documentation do you need? Choose as many as you like.

Controller: Grupo Actual Soluciones y Recursos Humanos, S.L. Purpose: to respond to your inquiry and, if you request it, send you a proposal. Legal basis: your consent. Recipients: Grupo Psicosoft companies where necessary and providers acting as data processors; data is not disclosed to third parties unless required by law. Rights: access, rectification, erasure and others, as explained in our privacy policy.