Security

Where your case data lives, who can see it, and what we don't do with it.

The questions HR directors ask on the first call — where case data is stored, who else can see it, and whether their draft is feeding someone's training run — get a direct answer below. Corestride ER is a per-workspace record with role-based access, encryption in transit and at rest, an immutable audit log, GDPR-aligned practices, and an explicit AI-processing disclosure. Read the broader FAQ ›

What we commit to

Data handling, encryption, access controls, and an explicit AI disclosure — in plain HR language.

Data residency

Per-workspace records, jurisdiction-aware from intake

Customer case data is keyed to a per-workspace record — intake fields, draft text, compliance-flag callouts, HR review log, and dossier entries all resolve against the same case URL. Workspace data resides in the platform's primary region; EU/UK residency is provisioned separately for cross-border teams so accounts in scope route to the in-region workspace. Data is never commingled across workspaces, jurisdiction is captured at intake, and that constraint flows into the same record downstream.

Encryption

Industry-standard encryption in transit and at rest

Data in transit uses TLS 1.3; data at rest uses AES-256. Encryption keys are managed through the platform's key-management envelope so per-tenant isolation is enforced at the storage layer rather than only in application logic. Raw database access is gated through the platform's API surface — there is no path from the customer horizon to the underlying store that bypasses the same access controls the workspace applies.

Access controls

Role-based access — admin, investigator, counsel, viewer

Three first-class roles are surfaced through the workspace: admin (HR director or workspace owner — full case directory, audit access, role assignment), investigator (the HR pro running the matter — case dossier + draft authority), and counsel (read-only reviewer scope, no edit authority on the draft itself). A default viewer seat is available for stakeholders during the review cycle. Single sign-on (SSO/SAML/OIDC) is supported on Enterprise contracts and is the contractually-configured identity surface for those workspaces.

Audit log

Immutable audit log, retention aligned to the case lifetime

Every case event — create, view, edit, export, share, role assignment — is appended to an immutable audit log keyed to the case URL. HR review log entries and dossier notes live on the same record, so the audit trail is one source rather than a thread of side documents. The retention window aligns with the platform standard so HR can finish review, hand off to employment counsel, and produce audit-trail exports from the case dossier; Enterprise tiers extend with custom retention windows and an e-discovery export surface.

Compliance posture

GDPR-aligned practices, SOC 2 controls in place

A Data Processing Agreement (DPA) is available on request. GDPR-aligned data-subject processes — access, erasure, portability — flow through the workspace rather than as ad-hoc one-offs. SOC 2 Type II controls are in place on the platform's security and confidentiality trust service criteria; a current sub-processor list is maintained and available under NDA. Reach out via the contact page ›

AI processing

Customer case data is not used for model training

Customer case data is processed to produce a jurisdiction-aware starting-point draft; it is never used to train foundation models, and it does not persist past the request boundary in the AI proxy. LLM traffic is routed through the platform's own proxy — no direct vendor API key is held against customer data. HR review remains the human gate before any employment action, and the audit log records when the AI-assisted draft landed on the record so the line stays clear at export.

The People's Approach is the canonical method Corestride ER operationalizes across every case — intake, fact-finding, decision, coaching, documentation. HR review lives inside the flow, and the audit log records when the AI-assisted draft landed on the case record. Drafts are starting points for HR review; severance and release language routes through employment counsel before sending; protected-class framing and FMLA-adjacent context get a second reviewer before any employment action.

Buyer handoff

Take the security overview into your review queue.

Download a stable, shareable summary of Corestride HR data handling, access controls, authentication posture, retention responsibilities, and HR review boundaries.

Need the DPA, SOC 2 letter, or the sub-processor list?

Procurement packages — the Data Processing Agreement, the current sub-processor list, the SOC 2 controls summary — are available on request via the contact page.