No. Employee job search activity, chat history with the AI Coach, and personal documents are scoped to the employee's private workspace and never surfaced in HR analytics. HR sees aggregated, de-identified metrics only.
Trust, Security & Compliance
Built so HR can buy with confidence.
Ture is engineered around a principle: HR oversight without employee surveillance. Privacy controls, security architecture, and compliance posture are designed for enterprise procurement, not retrofitted to it.
Privacy by design
Two views, one platform.
HR and employees use the same platform but see different data. Aggregated, de-identified analytics for HR. Encrypted private workspaces for employees. The boundary is enforced by the data model, not by policy alone.
- Job search activity, chat history, and personal documents are scoped to the employee's private workspace.
- HR sees program-level metrics: activation, engagement, placement, spend.
- No HR seat can elevate into an individual employee's job search activity.
- Provider seats have a third permission tier scoped to assigned cases only.
Security architecture
Defense in depth, designed for enterprise data.
Six pillars cover the controls procurement teams ask about most.
Encryption everywhere
TLS 1.3 in transit. AES-256 at rest. Per-tenant key scoping. Hardware-backed key storage on supported clouds.
Controls and certifications
SOC 2 Type II certified. ISO 27001 aligned. Annual third-party penetration testing. Continuous control monitoring.
Access controls
Role-based access for HR, employees, and providers. SSO via SAML / OIDC. SCIM provisioning. Just-in-time access for support.
Data residency
All data is stored and processed on Canadian soil, with per-tenant residency, backup, and retention controls aligned to your data policy.
Data minimization
Only the data needed for the workflow is collected. Employee-private data is encrypted at the row level and never surfaced in aggregate analytics.
Privacy regulations
GDPR and CCPA aligned. PIPEDA aligned. NYC Local Law 144 controls for automated decisions. DPIA support on request.
By the numbers
How Ture stays ahead of enterprise security expectations.
100%
Encrypted in transit & at rest
24h
Critical patch SLA
0
Material data incidents to date
Annual
External penetration testing
Privacy
Read the Privacy Overview.
A plain-language walkthrough of how Ture handles employee data, what HR can and cannot see, and how the privacy boundary is enforced in the platform.
Security & Trust
Enterprise-ready. Privacy-first.AI-governed.
Built for HR procurement teams who need data residency guarantees, AI audit trails, HRIS integration, and clear privacy boundaries — not just badges on a page.
Privacy by design
Data protection embedded into every layer. AI decisions are explainable and auditable. SOC 2 Type II certified.
AI governance
All AI recommendations are logged, traceable, and bias-tested. Compliant with NYC LL 144 automated employment decision requirements.
Canadian data residency
All data stored and processed on Canadian soil. Meets strict data sovereignty requirements for regulated industries.
Procurement & security questions, answered.
Procurement
Need a security review packet?
We will share our security architecture overview, current SIG, CAIQ, and any vendor-specific questionnaire your procurement team requires.
