In minutes, not weeks.
Security & Compliance
Your data security and privacy are our top priorities. Learn about our commitment to protecting your information.
- Home
- Security & Compliance
Our Security & Compliance Standards
GDPR
Full compliance with EU General Data Protection Regulation
CCPA
California Consumer Privacy Act compliant
EU AI Act
Designed in line with the Act's transparency, human-oversight & fairness principles
EU Data Hosting
All data stored and processed within the EU
About our EU AI Act alignment
We build and document our AI assessment features to align with the EU AI Act's requirements — transparency, human oversight, bias mitigation, data governance, accuracy and security. This covers WorkLab (recruitment and candidate evaluation) and LearnLab (education, training and assessment of learning outcomes), both of which fall under Annex III of the Act. The "EU AI Act" badge above reflects this alignment by design; it is not a certification or conformity mark. There is currently no official "EU AI Act certified" scheme.
Our AI assists, it does not replace, human decision-making. When you use WorkLab or LearnLab you act as the deployer under the Act and are responsible for ensuring qualified humans review AI-assisted outputs before any hiring, admission or evaluation decision, and for giving candidates and learners the required notices. See our Terms and Privacy Policy for the full allocation of responsibilities.
App Age Ratings
Our app has been rated by international age rating authorities. Parental guidance is recommended.
ESRB
United States
Teen
PEGI
Europe
Parental Guidance
USK
Germany
12+
IARC
Global
12+
DJCTQ
Brazil
12
PCBP
Russia
18+
CCC
Chile
14+
Microsoft
Global
12+Interactive Elements
Content Descriptors
Ratings certified by IARC (International Age Rating Coalition) and regional rating authorities. Due to AI-generated content and user interactions, parental guidance is recommended.
Our Security Practices
Data Encryption
All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. Your sensitive information is always protected.
Access Controls
Role-based access control ensures only authorized personnel can access your data. Multi-factor authentication is available for all accounts.
Infrastructure Security
Hosted on AWS with enterprise-grade security. Regular security assessments, penetration testing, and vulnerability scanning are performed.
Incident Response
24/7 monitoring with automated threat detection. Comprehensive incident response procedures ensure rapid response to any security events.
Your Data Rights
We believe in transparency and your right to control your personal information. Under GDPR and CCPA, you have the right to:
- Access - Request a copy of your personal data
- Rectification - Correct inaccurate or incomplete data
- Erasure - Request deletion of your personal data
- Portability - Receive your data in a portable format
- Object - Object to certain types of processing
- Restriction - Request limitation of processing
To exercise any of these rights, please contact us at [email protected]
Sub-processors & AI Partners
We partner with industry-leading providers to deliver secure, reliable infrastructure trusted by enterprises and universities worldwide.
Amazon Web Services
Infrastructure
Cloud hosting, storage, and compute services. Regional deployment across EU, Middle East, and other regions.
OpenAI
AI Processing
One of the models we use, alongside offline models, to process sensitive data across WorkLab and LearnLab.
Anthropic
AI Processing
One of the models we use, alongside offline models, to process sensitive data across WorkLab and LearnLab.
Stripe
Payments
Secure payment processing. We never store card data.
All sub-processors are bound by Data Processing Agreements (DPAs) and maintain their own compliance certifications. Institutions can opt to have sensitive data processed exclusively by offline models — available for both WorkLab and LearnLab.
AI Transparency & Ethics
Human Oversight
Our AI systems are designed to assist human decision-making, not replace it. All AI-generated assessments can be reviewed by qualified personnel, and candidates and learners have the right to request human review of AI decisions.
Fairness & Bias Prevention
We regularly audit our AI models for bias and fairness. Our assessment criteria are transparent, relevant to the role or learning objective, and designed to evaluate skills and understanding objectively regardless of demographic factors.
Transparency
Users are always informed when AI is being used to process their information or make recommendations. We provide clear explanations of how AI assessments work and what factors are considered.
Disclaimer: AI outputs are produced probabilistically and may be incomplete, inaccurate, or biased. They are intended to assist qualified reviewers, not to make automated decisions about candidates or learners. Bias audits, risk assessments and human-oversight controls reflect our alignment with the EU AI Act by design and are not a certification of compliance. Customers using WorkLab for employment decisions or LearnLab for education, training and assessment decisions act as the deployer under the Act and remain responsible for human review and for the notices given to candidates and learners.
Questions About Security?
Our security team is here to help. Contact us with any questions about our security practices or compliance.
Our Compliance & Security Standards
Hosted on AWS infrastructure with SOC 2 Type II & ISO 27001 certified data centers — with data residency available across EU, Middle East, and other regions
Across WorkLab and LearnLab, our AI assists — it does not replace — human hiring, grading, and academic decisions. The "EU AI Act Aligned" badge reflects alignment with the Act's principles by design — transparency, human oversight, and documentation — not a certification. Learn more.
Upstack.AIFilter the noise. Interview real candidates. One link works anywhere—no ATS migration needed.
Upstack AI FZ-LLC
FOAM2471, Compass Building
Al Shohada Road, AL Hamra Industrial Zone-FZ
Ras Al Khaimah, United Arab Emirates
Microsoft Store
Publisher: UPSTACK AI
Store ID: 9NT2GR4TDZ0G
Powered By
Last updated: 21/1/2026