Security

Guarded like it matters. Because it does.

Care hiring involves people's most personal details. Here's how Altis looks after them, in plain English.

Encrypted everywhere

Bank-level encryption protects details on the move and at rest. Nobody reads what they shouldn't.

Kept under UK rules

Stored and handled to UK GDPR standards, the same rules your care records live by.

Right people only

Role-based access: everyone on your team sees what their job needs, and nothing more.

Everything logged

Every step and decision is recorded, so you can always show your working to CIW and CQC.

AI that keeps secrets

Altis never uses your data to train AI. Your candidates' details stay yours, full stop.

Cyber Essentials Plus Underway

We're partway through certification, and happy to show you exactly where we're up to.

How your data travels

Kylie applies

Her details travel encrypted from her phone. Nothing readable in transit.

Locked inside Altis

Encrypted at rest, access logged, and never used to train AI.

Only your team sees it

Role-based access: each person sees what their job needs, nothing more.

Our promises, in writing

  • Your data is yours, exported back to you whenever you ask
  • We never sell data, and never use it to train AI
  • If anything ever goes wrong, we tell you promptly and plainly
  • Suppliers we build on are vetted, and every one is named below

Sensible questions, straight answers

Where is our data actually stored?
Your records live in the EU, handled under UK GDPR and the UK DPA. The AI that reads applications runs in the US under standard safeguards, and never trains on your data. Every provider is named just below. No mystery.
Which companies handle our data?

Vercel hosts Altis. It is based in the United States, and its servers for Altis are in London.

Supabase stores your records and the files people upload, and handles signing in. It is stored in the EU.

Resend sends the emails from Altis, such as interview invitations, reference requests, sign-in links and the codes referees are sent. It is based in the United States, and emails pass through its systems under approved safeguards.

Anthropic provides the AI that reads CVs and references, summarises them, and helps compare applications with a role. It never trains on your data. It is based in the United States, and the information is sent under approved safeguards. Every decision is made by a person.

Upstash helps stop misuse of Altis by counting how often requests come from the same IP address. It keeps the address only while it is counting: about 20 minutes at most.

Each works only to provide its service to us, under data protection terms with us. The same list, with the cookies Altis uses, is on its own page.

Who at Altis can see our candidates?
Almost nobody. Access is limited to the small number of people who need it to support you, and what they do is logged.
What if we leave? Do we lose everything?
No. Your records are exported back to you in a usable format. They were always yours.

Care data is personal. We treat it the way you'd want yours treated.

Security questions are welcome, and plain-English answers are part of every call.

Ask us the hard questions.

Bring your IT person, your registered manager, or just your worries. We'll answer straight.

Book a call →