Security
How Skosh protects your data, your accounts & your candidates.
How Skosh protects your data
- Nothing reaches a candidate unless a person approved it, or the template & rules it is sent from.
- Data is encrypted in transit, & at rest in the web console's database & file storage (AES-256). Secrets never reach the browser.
- Our AI providers only process your data to answer Sparky, delete it, & can't train on it. Sparky learns your team's way of working; we don't train AI models on your data.
- Skosh is the tool your team uses to reach people. We don't sell data, show ads or build our own database of people.
- The web console & its database are hosted on SOC 2 Type 2 infrastructure.
Report a security issue
If you find a vulnerability, email support@getskosh.com with the steps to reproduce it. Please give us a reasonable time to fix it before you share it, & do not access or change data that is not yours.
Your IT team can ask us for the IT review pack: support@getskosh.com. The Privacy policy & the Data Processing Addendum say more.