Security Policy
Last Updated: October 2026
Our Commitment to Security
At Taqeem, we take security seriously. This security policy outlines our commitment to protecting your data, your assessments, and your professional reputation on our platform.
Data Protection
Encryption: All data transmitted between your device and our servers is encrypted using industry-standard TLS 1.3. Your assessment submissions and evaluation results are stored in encrypted databases.
Access Control: Only authorized personnel can access your data. Access is logged and monitored for suspicious activity.
Security Reviews: We review our security posture on a regular basis and address vulnerabilities as they are identified.
Anti-Cheat & Integrity Systems
Session Monitoring: During assessments, we monitor your activity including window focus, network activity, and clipboard usage to detect potential cheating.
Behavioral Analysis: Our AI analyzes session behavior patterns and compares them against known cheating signatures to maintain assessment integrity.
Screenshot Verification: Periodic screenshots may be taken to verify identity and detect suspicious activity. These are processed only by our AI systems and then deleted.
Flagging System: Suspicious sessions are flagged for review. Users are notified if their assessment is flagged, with an opportunity to appeal or retake.
Vulnerability Disclosure
If you discover a security vulnerability in Taqeem, please report it responsibly to support@taqeem.tech instead of disclosing it publicly.
Response Time: We aim to acknowledge vulnerability reports within 48 hours and provide updates within 7 days.
Acknowledgement: We review all responsible disclosure reports and will acknowledge valid findings.
Compliance Standards
- ✓GDPR: We follow GDPR principles for data minimisation, purpose limitation, and user rights
- ✓CCPA: California users may request access to or deletion of their personal data at any time
- ✓Infrastructure compliance: We use Supabase (SOC 2 Type II certified) and Vercel (SOC 2 certified) as infrastructure providers
- ✓Data residency: Assessment data is stored in Supabase-managed PostgreSQL instances in dedicated regions
Your Rights
- •Right to access your data and assessment records
- •Right to request data export in standard formats
- •Right to request account deletion and data removal
- •Right to dispute assessment results through our appeal process
Security Questions?
If you have questions about our security practices or want to report an issue, please contact our security team.
Email: support@taqeem.tech
Response Time: 24-48 hours