Enterprise Trust & Security
FJSI Resourcing (OPC) Private Limited · Prepared October 31, 2026
Draft for review. Your signed client agreement and applicable law take precedence.
1. Encryption
All traffic between browsers and VerbText is served over HTTPS using modern TLS (TLS 1.2 or higher, with TLS 1.3 negotiated where the browser supports it). Database records, voice recordings, ID-check photos and integrity photos are stored on managed infrastructure that encrypts data at rest with AES-256.
2. Cloud infrastructure
VerbText runs on managed cloud and edge providers whose data centres and services hold independent SOC 2 Type II and ISO/IEC 27001 attestations, including Amazon Web Services. These certifications belong to our infrastructure providers; VerbText itself has not yet completed its own SOC 2 or ISO 27001 audit. Provider reports can be requested from the respective providers under NDA.
3. Access control
Every console is role-separated: recruiters, trainers, candidates and administrators each see only data they are authorised for. Ownership is checked on the server before reports, pipeline updates or candidate shares are returned. Assessments open only through private, single-use invitations, and completed tests cannot be retaken. Voice recordings, ID photos and proctoring photos are kept in private storage and shown only through signed links that expire after 10 minutes. An activity log records who opened reports, played recordings or changed candidate status.
4. India DPDP Act 2023
VerbText processes candidate data for the employer that invited the candidate, for the purpose of assessment. Candidates accept a privacy notice before starting, can request access, correction or erasure through the Privacy Center, and grievances can be raised with FJSI Resourcing (OPC) Private Limited at support@verbtext.com or through the contact page. Data is retained for up to 24 months after last activity unless the client agreement or law requires otherwise.
5. GDPR posture
For candidates outside India, VerbText follows GDPR principles: purpose limitation, data minimisation, documented retention, data-subject requests and processing on the instruction of the employer as controller. A data processing agreement can be provided with the client contract. This is a compliance posture, not a third-party certification.
6. AI evaluation and model training
Candidate audio, chats and emails are sent to AI models only to produce that candidate’s evaluation. VerbText does not use candidate data to train AI models, and our AI providers’ business terms state that API inputs are not used to train their public models. Where automated evaluation is unavailable, evidence is saved for human review instead of generating an unsupported score.
7. Monitoring and incidents
Errors are logged centrally and reviewed by the VerbText team in real time. Security concerns or suspected incidents can be reported at support@verbtext.com; affected clients will be notified without undue delay as required by applicable law.
8. Network allow-listing
Corporate networks need outbound HTTPS (port 443) and secure WebSockets (WSS) to verbtext.com and its backend service domains, plus microphone and camera permission in the browser for Voice and verified-mode tests. A detailed domain list is available on request for firewall or proxy configuration.
Questions or requests: contact Verbtext. Read our Privacy Policy.