Quilgo collects only the data necessary to provide and secure online assessments, which includes:
No sensitive personal data is processed under the Data Processing Addendum (DPA).
Access to proctoring recordings and personal data is strictly limited to authorised users and personnel who have received explicit permission.
Quilgo implements role-based access controls and confidentiality obligations to ensure that only individuals who require access for operational, support, or security purposes can view assessment data. All access activities are logged unauthorised to prevent unauthorised access.
In some cases, approved subprocessors that provide infrastructure, storage, or support services may process data, adhering to equivalent security and confidentiality obligations.
Quilgo follows data minimization and storage limitation practices.
Retention periods may also be configured in accordance with the customer agreement and applicable legal requirements.
Quilgo prioritises secure international data handling and relies on trusted infrastructure providers for its hosting and backup services.
Currently, our hosting locations include:
Customers with specific compliance or regional data residency requirements are encouraged to contact Quilgo to discuss custom storage and processing arrangements. Before any subprocessor is utilised, we ensure they meet rigorous security, privacy, and confidentiality standards.