CodeSignal

Documents on the trust centre

What the vendor lists, typed; public items can be read now, the rest are available on request.

What the vendor says

Answers the vendor publishes to questions buyers ask, quoted with the link to where it says so.

• Where data is hosted or processed

  Where is CodeSignal hosted?

  “Our infrastructure is hosted on Amazon Web Services (AWS). All deployments use virtual private cloud (VPC) configurations with firewalls and isolation mechanisms.”

  as of 21 Sep 2026Source

• Where data is hosted or processed

  Where is customer data stored?

  “Data is hosted on AWS in the following U.S. regions: us-east-1 (primary), us-west-2, and us-east-2.”

  Regions named: USas of 21 Sep 2026Source

• Encryption

  How is data encrypted at CodeSignal?

  “All data is encrypted at rest using AES-256 and in transit using TLS v1.2+.”

  as of 21 Sep 2026Source

• Encryption

  Are encryption keys rotated?

  “Yes. Encryption keys are rotated every 90 days and emergency key rotation is available upon request.”

  as of 21 Sep 2026Source

• Use of customer data to train models

  Is proctoring data used for AI training?

  “No. Proctoring data (e.g., webcam/mic feed) is never used for AI training and is retained for a maximum of 14 days.”

  as of 21 Sep 2026Source

• Use of customer data to train models

  Does CodeSignal use candidate or customer data to train AI models?

  “No. CodeSignal does not use customer or candidate data to train AI models unless explicit, written consent is provided.”

  as of 21 Sep 2026Source

• Penetration testing

  Does CodeSignal conduct regular penetration testing?

  “Yes. Independent third-party penetration tests are conducted annually on our APIs, web applications, and network infrastructure.”

  as of 21 Sep 2026Source

• Data retention and deletion

  Can customers request data deletion?

  “Yes. Data deletion is supported through customer request and governed by our data retention and privacy policies.”

  as of 21 Sep 2026Source