Enterprise Security

Our approach

We understand that leadership and team profiling involves sensitive organisational information. Our platform is built with security controls appropriate to that trust.

Data protection

• Encryption in transit — all traffic to the site is encrypted with TLS (HTTPS).
• Encrypted storage — customer records are stored in an encrypted, managed database.
• Payment security — card payments are handled entirely by Stripe, a PCI DSS Level 1 certified provider. Card details never touch our servers.
• Authentication — accounts are secured by Clerk, with modern session management and protection against credential attacks.

Access controls

• Administrative functions are restricted to authorised personnel with additional password protection.
• Customers can only access their own orders, assessment codes, and bookings.
• Uploaded documents are stored in private object storage, not publicly accessible.

Assessment confidentiality

Individual HBDI® results are confidential to the participant. Team composite reports are shared only with the engaging sponsor as agreed at the start of an engagement. Debrief conversations are confidential between the participant and their certified practitioner.

Questions or security reports

For security questionnaires, enterprise data processing agreements, or to report a vulnerability, contact sja@urbanassessments.com.