Trust Center

Security, privacy, compliance, and data governance practices for organizations running assessments with TestInvite.

Data encryption

All data is encrypted both in transit and at rest. No data is exchanged or stored over unencrypted channels.

Access control

Role-based access controls ensure every user and administrator can only reach the data their role explicitly permits.

Audit logging

System-wide audit logs track data modifications and system actions. Enterprise customers can request logs related to their data in the event of an incident.

Vulnerability management

Vulnerabilities are identified, classified by severity, and remediated on structured timelines aligned with recognized industry standards.

Secure infrastructure

TestInvite is hosted exclusively on Google Cloud. All infrastructure is managed within Google's environment, we operate no proprietary data centers.

GDPR compliant

TestInvite operates as a Data Processor under GDPR. Your organization retains full ownership and control of participant data as Data Controller.

FedRAMP-authorized cloud

Infrastructure runs on Google Cloud services that hold FedRAMP authorization for cloud security and data protection.

Standard Contractual Clauses

Data transfers from the EU are governed by Standard Contractual Clauses (SCCs), providing a lawful basis for international processing.

Data confidentiality

Participant data is processed solely to deliver the assessment service. It is never shared with third parties except where required by law or necessary to operate the platform.

Data location

All data is stored and processed in the United States on Google Cloud infrastructure.

Data ownership

Customers act as Data Controllers. TestInvite processes data strictly as a Data Processor, only as directed by the applicable contract.

Data retention