Trust
Security
We built tiikme around verified, careful access to career data. Here is what that means in practice, described plainly rather than with certifications we do not hold.
Secure authentication
Sign-in is handled by our authentication provider using industry-standard session management. Passwords are never stored in plain text; they are hashed before being saved.
Encryption in transit
Every connection to tiikme, on the web app and every API call, is encrypted over HTTPS/TLS. We do not serve any part of the Platform over an unencrypted connection.
Access controls
Your Flex profile, applications, and organisation data are protected by row-level access rules enforced directly in the database, not just in application code. You approve which organisations can see your profile, and organisation members only see the roles and candidates their own organisation has access to.
Infrastructure
tiikme runs on established, managed cloud infrastructure for hosting and data storage. We do not manage our own physical servers, and we rely on our providers' underlying platform security and automated backup capabilities.
Responsible disclosure
If you believe you have found a security vulnerability, please report it to security@tiikme.com before disclosing it publicly. We will acknowledge your report and work to address confirmed issues promptly.
Incident response
If we become aware of an incident that affects your personal data, we will investigate, take steps to contain it, and notify affected users and, where required by the Digital Personal Data Protection Act, 2023, the relevant authority.
What we do not claim
tiikme does not currently hold formal certifications such as ISO 27001 or SOC 2. If that changes, this page will be updated to reflect it accurately.