🔒
Enterprise-Grade Data Security
Employee trust is the foundation of high survey participation. CorpMetrix protects every response with bank-grade encryption, regulatory compliance, and absolute anonymity guarantees.
Key Capabilities
Everything you need to make enterprise-grade data security a competitive advantage for your organisation.
AES-256 Encryption
All data is encrypted at rest (AES-256) and in transit (TLS 1.3). Encryption keys are rotated quarterly.
Saudi NCA Compliance
Data residency on Saudi-hosted servers meeting NCA (National Cybersecurity Authority) Essential Cybersecurity Controls.
GDPR Alignment
Data processing agreements, right-to-erasure workflows, and consent management align with GDPR and regional equivalents.
Multi-Factor Authentication
All admin and manager portal logins require MFA via authenticator app or SMS OTP.
Anonymity Engine
A minimum group size threshold (default: 5) prevents any individual from being identified through their responses.
Audit Logs
Full tamper-evident audit trail of all admin actions, data exports, and configuration changes.
Role-Based Access Control
Granular RBAC ensures users only access data relevant to their scope — no oversharing.
Penetration Tested
Annual third-party penetration testing and quarterly vulnerability scans by certified cybersecurity firms.
Frequently Asked Questions
All data is stored on Saudi-hosted servers by default for GCC clients. EU-hosted and US-hosted options are available.
No IP address, device ID, or submission timestamp is stored linked to individual responses. Group reporting only activates above 5 respondents.
Yes. We provide a Data Processing Agreement (DPA), support data subject access requests, and implement data minimisation principles.
Clients receive a full data export upon contract termination. Data is securely purged from CorpMetrix systems within 30 days.
Our security controls are aligned with ISO 27001. Full certification is currently in progress.