Security practices

Protecting our customers’ information and their users’ and candidates’ privacy is extremely important to us. As a cloud-based company entrusted with some of our customers’ most valuable data, we’ve set high standards for security.

Testlify has invested heavily in building a robust security team, one that can handle a variety of issues – everything from threat detection to building new tools. In accordance with GDPR requirements relating to security incident notifications, Testlify will continue to meet its obligations and offer contractual assurances.

If you’d like to learn more about Testlify’s security policies and procedures, please see our security page. It provides detailed information on how we approach security, and includes a white paper on how Testlify ensures user data security in particular, including our technical and organisational measures(TOMs), as well as our encryption standards.

External and internal application security testing

Our security team performs automated and manual application security testing on a regular basis to identify and patch potential security vulnerabilities and bugs on our applications.

Internal audits

We audit our systems and controls against some of the most widely-accepted security standards and regulations in the world. These reviews occur at least annually and are thorough in their inspections.

Continual improvement

A critical part of any information security management program is the continual improvement of security programs, systems, and controls. To this end, Testlify is committed to soliciting feedback from different internal teams, customers, internal and external auditors, and using this feedback to develop improved processes and controls.