Security and Compliance

Ensure information and data security from the ground up

Protecting and defending user privacy is at the heart of our work. We work closely with all of our customers to understand and meet all compliance requirements and security needs.

Rakuna prioritizes safeguarding the security and confidentiality of all entrusted information. Our services and internal procedures fully adhere to relevant laws, regulations, and recognized industry standards.

As part of our dedication to data protection and regulatory compliance, Rakuna has successfully undergone an ISO 27001 audit and is now certified. This achievement underscores our commitment to implementing the highest standards for securing sensitive customer data.

Rakuna ensures its operations remain aligned with ISO 27001, OWASP and GDPR guidelines, following best practices in information security to protect the data under our management.

On Data Security:
Rakuna has always valued personal data and the rights of its owners from day one. Our Privacy Policy thoroughly outlines the types of information we collect and how we handle and protect it, and includes provisions for users to actively opt in and out of promotional and email campaigns with positive consent.

Our Terms of Service clearly define the user content delivered to our system, as well as the limitations of Rakuna’s rights over such information. In addition, our development and security practices strictly adhere to OWASP security principles. We also have an official Information Security Plan in place to safeguard the security and privacy of all data.

Any user—recruiter or candidate—can always reach out to us via email to retrieve information they may have forgotten.

On Data Migration:
Data migration will depend on the type and volume of data to be migrated based on the customer’s request.

Rakuna will retain all data in its possession until the customer requests that such data be erased. “Erase” refers to the process in which Rakuna permanently deletes and destroys customer data, ensuring that it cannot be restored or recovered.

Customers may request that project data be erased after a specified period of inactivity or when certain conditions are met, in line with their own data policies. Requests for data deletion can be customized based on the company’s requirements, providing flexibility to meet compliance standards.

Please note that set-up and maintenance costs may apply to these services, with fees varying depending on the complexity and scope of the company’s request.

Rakuna integrates with Azure Active Directory and/or Google SSO.

Rakuna is committed to the following foundational principles built into the DNA of our company:

  1. Transparency
    We inform and educate our users and customers of our data policies. We do this through in-product notifications, campaigns, and direct conversations with our customers to ensure people understand how their data is being used.
  2. User Control
    We provide people with the ability to control how their data is used.
  3. Accountability
    We are committed to sticking to our practices of protecting data, getting frequent feedback from regulators, policymakers, privacy experts, and improving how we protect personal information.

In order to fully meet key requirements from GDPR, we have added new processes and features that further empowers our users to do more about their personal data:

  • Although candidate applications’ proof of consent is not compulsory under GDPR, candidates are now given notice of consent by Terms of Service within their survey emails where they are asked to upload digital versions of their resumés.
  • Recruiters can now select candidates within the prospect list to send emails as confirmations of consent if needed to.
  • Any user now can email us not only to request and re-collect provided information but also to request a complete deletion of the information on our platform.
  • All users are emailed with updates on changes to the Privacy Policy, Terms of Service, and GDPR compliance policy.

Read more about Rakuna GDPR readiness here.

Rakuna supports federal hiring regulations (EEOC and OFCCP) with private question fields and reports to protect workers, promote diversity, and enforce the law.

Data is securely backed up on a scheduled basis and is available for disaster recovery purposes.

Exit mobile version