Enterprise-grade security, privacy-by-design, and GDPR-compliant CV processing, backed by an ISO/IEC 27001:2022 Information Security Management System and continuous monitoring. This page details the controls, certifications, and commitments behind every CV Saply processes.
ISO/IEC 27001:2022
Certified against ISO/IEC 27001:2022
Formal Information Security Management System (ISMS) implemented with Sencom Security and independently certified against ISO/IEC 27001:2022.
GDPR Compliant
EU data residency ยท Processor under GDPR
Fully compliant with the EU General Data Protection Regulation and Belgian data protection law. Personal data is processed strictly on documented customer instructions.
Aikido Security
Continuous code, cloud & dependency scanning
Continuous SAST, IaC, secrets and dependency scanning across our codebase and cloud, with a public audit report available on request.
Learn moreSystem Status
Real-time uptime & incident history
Live operational status, incident timelines and post-mortems published on our public status page.
Learn more
Continuously monitored by Aikido Security. View our public audit report.
How we protect your data
Our security programme spans governance, people, applications, and infrastructure. Every control below is documented in our ISMS and independently auditable.
Saply operates a formal Information Security Management System certified against ISO/IEC 27001:2022, with documented policies, defined roles, and clear accountability.
Customer data is processed as a Processor under GDPR, on documented instructions only. We never use customer data to train AI models.
Industry-standard cryptography protects customer data in transit and at rest across the platform.
Access is granted on a least-privilege basis, with centralised identity management and regular access reviews.
Security is built into our development lifecycle, and our cloud infrastructure is designed for resilience.
We continuously monitor our environment and follow a documented incident response process if something goes wrong.
For deeper detail, we make our security and privacy documentation available on request. The pack includes our ISMS overview, sub-processor list, Aikido audit report, and pre-filled answers to standard security questionnaires.
