Security & Data Protection

SkillProof is built on established cloud providers including Vercel, Cloudflare, Supabase and Stripe.

The public website and app use HTTPS, security headers and a Cloudflare security layer. Payments and subscription billing are handled securely through Stripe.

SkillProof is designed around organisation-level data separation and role-based access controls.

Owners, admins, managers and employees have different access levels so users only see the records and actions relevant to their role.

Training evidence, certificates and compliance records are treated as business-sensitive workforce data.

SkillProof is designed to keep evidence linked to the relevant organisation, staff member, training item or assessment rather than scattered across local files and shared folders.

SkillProof includes audit trails and reporting workflows to help customers understand important changes and prepare compliance records.

Audit records are intended to support customer visibility and should not be treated as a substitute for a customer's own legal or regulatory advice.

Stripe handles payment methods, invoices and subscription billing. SkillProof does not store card numbers, CVV codes or full card details directly.

Billing access is intended for authorised customer users such as owners or admins.

SkillProof does not currently claim ISO 27001, SOC 2 or Cyber Essentials certification for SkillProof itself.

Future security roadmap items may include formal policies, external review and certification readiness work.