Recruitment Policy

AuthBridge collects your Personal Data during the application or recruitment process and over time during our relationship with you in number of ways through multiple channels which includes:

• Directly from you (when you apply through job portals or via email or in person);
• Information collected from publicly available sources, including any job search portals you use ;
• Information related to you provided by third-party placement firms, recruiters;
• Other background information provided or confirmed by academic institutions and training or certification providers;
• Criminal records data obtained through criminal records checks; 
• Through referrals from your friends, family or professional connects; and
• From third parties and/ or third-party tools (through recruitment agencies and background verification agencies).

Any Personal Data/ Sensitive data is classified as confidential as per AuthBridge information classification policy.

• Risk Assessment – Risk assessment activity is conducted periodically and based on the impact assessment, required security controls are identified and implemented to protect Personal Data.
• Personnel Security – All employees are background verified prior to sharing the Personal Data with them. Confidentiality agreement and Acceptable use policy are signed with all employees. Awareness training based on data privacy, data security and data privacy incident reporting procedure is conducted periodically. For AuthBridge’s third party service providers, background verification is also conducted along with signing the agreement including data privacy or data security obligations, NDA and Code of conduct.

IT Controls –

• Systems & Network Security controls are applied such as System Hardening, Patch Management, VPN Connectivity, Firewall, Intrusion Detection and Prevention System, Patch Management, End Point Protection, Anti-virus, Data Leak Prevention, VAPT of systems, servers, applications, networking devices and applications and Log Management.
• Communication Security controls such as Encryption (Data at rest and transit, SSL/TLS, SSH, Message digest)
• Application security practices including secure SDLC process, security scanning and IP based restriction. Other data security and access management practices are as per controls described in this section.
• Access Management controls such as access role-based access, password protection, multi-factor authentication and principle of least privileges.
• Masking of personal data wherever not needed. Periodic and need basis access review and reconciliation.
• Log Management -Logs are stored at secure place. All accesses to the applications are logged in a secure platform and/or application specific database down to the activity level.
• Business Continuity is ensured through highly resilient and redundant architecture, regular and systematic backups for all business-critical applications and servers as per the defined frequencies. Periodic testing of business continuity & disaster recovery plans is conducted, and continual improvement actions are taken.

Physical Security Controls –

• AuthBridge’s premises are protected 24/7 through security guards to restrict any unauthorized entry.
• Visitor management process and Material In/Out process is implemented.
• Biometric device is in place to capture the entry of employees and registered is maintained for all visitors. Reconciliation is done periodically.
• There is 24/7 CCTV monitoring. Restricted areas are labeled, and entry is allowed for only authorized users.
• There is 24/7 Power back up to support smooth functioning of the facilities. Preventive maintenance is done for support equipment. Facility temperature is maintained with air conditioners. Fire Detection & Prevention system is implemented.
• Emergency Response Team (ERT) members are assigned to each working floor to ensure the timely evacuation in case of emergency. Considering the data center security, we have water leakage alarm, rodent repellent system implemented in place, humidity & temperature monitoring mechanism, separate visitor registers for restricted area, and inventory movement register in place.

Incident Management Process –

• Though AuthBridge has the best possible controls to protect privacy of your Personal Data, there is an incident management policy and procedure implemented to address any security incidents/privacy breach. Incidents are reported, recorded, investigated, and responded with the corrective action plan in a timely manner. There is a mechanism to notify the impacted clients (if applicable) who must further notify the respective individual/s.