Last updated:
Our commitment
CareerBook ERP™ treats every student and institutional record as confidential. Security controls are applied at the infrastructure, application and organisational levels.
Encryption
All data is encrypted in transit using TLS 1.2 or higher and at rest using AES-256. Encryption keys are managed through a dedicated key management service with strict access policies.
Access control
Access to customer data is granted on a least-privilege basis.
- Role-based access control with field-level permissions
- Single sign-on and multi-factor authentication
- Quarterly access reviews for internal staff
- Complete audit logging of administrative actions
Monitoring & incident response
Infrastructure and applications are monitored continuously. Security incidents are handled under a documented incident response plan, and affected customers are notified in line with contractual and regulatory obligations.
Secure development
Our engineering teams follow an OWASP-aligned secure development lifecycle including code review, dependency scanning and regular third-party penetration testing.