Protecting client data — and the people who label it
Elevated platform access is a responsibility. Our controls cover technical security, regulatory compliance and the psychological safety of taskers working on sensitive evaluation queues.
Six pillars of our security posture
Access control
SSO with mandatory MFA, least-privilege role assignment, quarterly access reviews and automated deprovisioning within one hour of roll-off.
Secure delivery environments
Managed endpoints with disk encryption and DLP, plus a physically controlled secure room in Nairobi for restricted programmes: no personal devices, no cameras, biometric entry.
Regulatory compliance
GDPR-aligned processing agreements, Kenya Data Protection Act 2019 registration, CCPA support and SOC 2 Type II aligned control mapping with annual third-party review.
Confidentiality
Per-project NDAs, prohibited-tool policies covering external AI assistants, watermark-aware handling and zero data retention on tasker endpoints.
Wellbeing for safety work
Exposure caps on graphic content, mandatory rotation off harm queues, opt-out with no pay penalty, and licensed counsellor sessions funded by RemoteWise.
Ethical employment
Written contracts, published rate cards above the Kenyan living-wage benchmark, paid training time and a documented grievance and appeals process.
The answers your security team asks for
- Incident response SLA
- Client notified within 24 hours of confirmed incident
- Data retention
- Zero local retention; all work performed in-platform
- Background screening
- Identity, right-to-work and reference checks on all taskers
- Penetration testing
- Annual third-party test of internal systems
- Business continuity
- Dual-site power and connectivity redundancy in Nairobi
- Insurance
- Professional indemnity and cyber liability cover maintained