Security & Trust

Built to protect your data and stand up to scrutiny

Corsable handles competency data, exam transcripts and certificates that people rely on. We treat that responsibility seriously: clear access controls, honest compliance posture, and evidence designed to hold up in an audit.

How we protect data

The pillars of our approach

A practical, layered approach to keeping competency records safe, private and verifiable.

Encryption in transit & at rest

Connections are designed to be encrypted in transit, and stored data is designed to be encrypted at rest, so records stay protected as they move and while they sit.

Access controls & roles

Admins, managers and learners see only what their role permits. Permissions are scoped by organisation, team and assignment, so sensitive results stay with the right people.

GDPR-ready data handling

Our data practices are designed to support GDPR obligations: lawful processing, data-subject requests and clear roles around the personal data you bring to the platform.

SOC 2 in progress

We are working towards SOC 2 to formalise our security and operational controls. We will share progress honestly and do not claim certifications we do not yet hold.

Tamper-evident evidence

Scores, transcripts, rubrics and timestamps are captured as audit-ready records. Evidence is tamper-evident and exportable, so a result can be traced back to how it was earned.

Residency & retention controls

Designed to give organisations clarity over where data lives and how long it is kept, with retention aligned to your policies and the records you are required to hold.

Defensible by design

Built for results that hold up

When a competency is signed off in Corsable, the proof comes with it. Every gate, exam and certificate leaves a trail: the rubric that was applied, the score it produced, the transcript of the live AI voice exam, and the timestamps around it. That evidence is captured as it happens and exported on demand, so when an auditor, regulator or internal reviewer asks "how do you know this person is competent?", the answer is a record, not a recollection. Honest compliance posture and tamper-evident evidence are two sides of the same goal: results you can defend.

Questions about security or compliance?

Talk to us about your data-handling, residency and audit requirements, or get started and see the evidence trail for yourself.