MTestHub Trust Center
Enterprise-Grade Security & Responsible Data Protection
MTestHub is designed to protect customer and candidate information while providing transparent, explainable AI-powered hiring workflows.
Download Security & Privacy Overview (PDF)Last updated Oct 22, 2026
Data Encryption
HTTPS everywhere; at-rest details being confirmed
Access Controls
Roles, permissions, tenant isolation
Data Retention
Customer-configured retention & deletion
AI Safeguards
Human-controlled, evidence-based AI
Candidate Privacy
What candidates should know
Subprocessors
Every provider that processes data
Incident Response
How we handle security events
Compliance Program
Accurate status, no inflated claims
Compliance status
Accurate labels from our compliance registry. We never display a certification badge we haven't earned.
SOC 2 Readiness Program Underway
In ProgressMTestHub is actively building and documenting its security-control environment in alignment with the AICPA Trust Services Criteria as part of its SOC 2 readiness program. No SOC 2 examination has been completed yet. We will update this Trust Center as formal audit milestones are completed.
UAE PDPL Readiness
In ProgressMTestHub is reviewing its practices against the UAE Personal Data Protection Law (Federal Decree-Law 45/2021). Final legal review is pending.
ISO/IEC 27001 — Not Certified
PlannedMTestHub is not ISO/IEC 27001 certified.
HIPAA — Not Applicable
Not ApplicableMTestHub is a recruiting platform and is not designed to process protected health information (PHI). Do not upload PHI.
Procurement fast path
Request Security Information
FAQ
Is MTestHub SOC 2 certified?
SOC 2 Readiness Program Underway. MTestHub is actively building and documenting its security-control environment in alignment with the AICPA Trust Services Criteria as part of its SOC 2 readiness program. No SOC 2 examination has been completed yet. We will update this Trust Center as formal audit milestones are completed.
How is candidate data protected?
Tenant isolation, role-based access, audit logging, HTTPS, permission-gated exports and identity redaction from AI scoring. See Security.
How does MTestHub support privacy obligations?
Through customer-controlled retention, export and deletion, a Data Processing Addendum, a public subprocessor list and a privacy request workflow — supporting obligations under the privacy laws that apply to each customer.
Who owns customer data?
Customers own their data. MTestHub processes it to provide the service.
Does MTestHub sell candidate data?
No.
Does MTestHub use candidate data to train AI?
Customer and candidate data is not used to train general-purpose AI models. AI providers process data only to return results to MTestHub.
Where is data hosted?
Primary hosting region and subprocessor locations are being confirmed with our infrastructure providers. We do not currently offer contractual data residency.
Who are your subprocessors?
See the Subprocessors page — it lists every active provider.
Can customers delete/export data?
Yes. Organizations can export and delete data and configure retention; candidates can request deletion from their portal.
How long is video retained?
Per the assessment's media retention setting — default 90 days, configurable by the customer.
Can MTestHub staff access customer data?
Only through an authorized, time-limited, bannered and audit-logged support session with a stated reason.
How does AI influence hiring decisions?
AI surfaces job-related evidence and recommendations; people make every decision. AI never rejects candidates automatically.