How we protect your documents and data
Your CV and evidence describe your whole career. Here is exactly what happens to them when you use the Endorsa assessment, stated plainly.
Last updated: 27 July 2026
In transit
Every connection to this website and to the assessment application (app.endorsa.uk) is encrypted with TLS (HTTPS). Documents are never transferred over an unencrypted connection.
Where your documents live
Uploaded documents are stored on our assessment application's secure cloud infrastructure (hosted on Railway, in the United States) for the sole purpose of producing your assessment. They are not placed in shared drives, not passed around by email, and not accessible from the public internet.
Who can see them
- You — through secure, token-protected links that are personal to your assessment. Links are not guessable and are not listed anywhere public.
- Our principal consultant — the only person with access to the assessment system. There is no wider team with access to your files.
- Nobody else. We do not sell, share or trade your documents or your details, ever.
How the AI processes your documents
Your documents are analysed using Anthropic's Claude models under commercial API terms. Under those terms, API inputs and outputs are not used to train Anthropic's models. The AI reads your documents to produce your report; your career does not become anyone's training data.
Payments
Payments are processed by Stripe. We never see or store your card details.
Deletion on request
Email support@endorsa.uk from the address you used for your assessment and we will delete your uploaded documents and assessment outputs. Your rights under UK GDPR, including access, correction and erasure, are set out in our privacy policy.
What we deliberately do not do
- No document is ever published, quoted or used as a sample, even in redacted form.
- No testimonials or case details are published without explicit written consent.
- No third-party marketing tools receive your uploaded documents.