Trust center

1. Legal documents

The following documents apply to every customer of the Services unless an Order Form says otherwise.

2. Where we stand today

We give straight answers on security and compliance. Here is the current state, with no marketing.

2.1 Platform

• Multi-tenant SaaS with per-organisation logical isolation of customer data.
• Role-based access control with system roles and unlimited custom roles per organisation. Every permissioned action is gated.
• Multi-factor authentication available for end users; required for staff access to production.
• Append-only audit log for administrative and security-sensitive events, exportable by customers.
• Token-gated workflows for candidates: no candidate ever creates an account.

2.2 Encryption

• In transit: TLS 1.2 or higher with modern cipher suites; HSTS on the production domain.
• At rest: protected using the encryption-at-rest features of the underlying cloud infrastructure provider.
• Field-level encryption for highly sensitive identifiers is on the roadmap and not represented as currently in place.

2.3 Compliance posture

• SOC 2 Type II: in progress. Report and bridge letter will be made available on this page under mutual non-disclosure once issued.
• ISO/IEC 27001: in scoping. We are not yet certified.
• India DPDP Act, 2023: readiness assessment ongoing. We track phased rule notifications and update our practices as obligations come into force.
• EU GDPR: we offer EU Standard Contractual Clauses to customers in the EEA and UK, and act as a data processor under our DPA.

3. Documents on request

The following documents are made available on request, typically under a mutual non-disclosure agreement:

• Most recent third-party penetration test summary letter (when available).
• Statement of Applicability for ISO/IEC 27001 (once published).
• Subprocessor list with named vendors and their roles.
• Business continuity and disaster-recovery plan summary.
• Standard security questionnaire responses (CAIQ, SIG-Lite, custom).

Email security@ppulse.com with your request and we will respond within five (5) business days.

4. Service status

Live availability and incident history is published at status.ppulse.com. Subscribe there for incident emails, scheduled maintenance windows, and post-mortem updates.

5. Report a vulnerability

We appreciate responsible disclosure. Send a description of the issue and steps to reproduce to security@ppulse.com. We will acknowledge within five (5) business days and will not pursue legal action against good-faith researchers who follow our process and avoid privacy violations, service disruption, or destruction of data during testing. Full details are in our Security overview, Section 15.

6. Contact

Kaaspo Enterprises Private Limited
Chennai, Tamil Nadu, India
Privacy: privacy@ppulse.com
Security: security@ppulse.com
Legal: legal@ppulse.com