Question 1

How is organizational data protected in transit and at rest?

Accepted Answer

LINK is designed around end-to-end encryption. Messages are encrypted on the sender's device and decrypted only by the verified recipient; our managed infrastructure acts as a transport layer and does not hold message decryption keys. Data at rest on our infrastructure is encrypted with AES-256, and all transport is TLS 1.3. This describes our architecture, it has not yet been validated by an independent third-party audit, and we will publish those results here when they exist.

Question 2

What is your deployment and infrastructure model?

Accepted Answer

LINK is delivered as a fully managed, multi-tenant SaaS environment with per-tenant isolation. This turnkey model provides secure deployment without the weeks of server hardening, database hosting and ongoing patching required to maintain self-hosted open-source alternatives. Customers do not run, patch or scale any infrastructure.

Question 3

Does the platform meet international privacy benchmarks?

Accepted Answer

LINK is built to GDPR and UK GDPR requirements. A Data Processing Agreement with EU Standard Contractual Clauses and the UK International Data Transfer Addendum is available to enterprise customers, alongside a contractual 72-hour breach notification commitment. We do not currently hold a SOC 2 Type II attestation or ISO 27001 certificate; external penetration testing and independent audits are planned and the reports will be published here.

Question 4

How do you handle HR investigations without compromising E2EE?

Accepted Answer

Users flag policy violations by submitting encrypted, watermarked incident reports from their client. Only your organisation's authorised HR or compliance officers hold the keys to decrypt those specific reports, LINK cannot read them, and no blanket surveillance of private chats is possible. Reports are pseudonymous rather than anonymous: the reporter's identity is withheld from HR by default, but LINK retains the reporting account's username and can be compelled to disclose it under a binding legal order. HR may ask a reporter to identify themselves voluntarily and the reporter may refuse.

Question 5

Who can access our tenant data internally?

Accepted Answer

Access to production systems is restricted to a small number of named engineers, requires multi-factor authentication, and is logged. No LINK employee can read message content, because we do not hold the decryption keys. Support access to tenant metadata is time-boxed and recorded in an audit log available to your administrators on request.

Question 6

What happens to our data when we leave?

Accepted Answer

On termination, tenant data is exported on request in a machine-readable format and then deleted from live systems within 30 days, and from backups on the next rotation cycle (maximum 35 days). Deletion is confirmed in writing.

信任与安全中心

CISO 常见问题

文档与联系方式

CISO 常见问题

组织数据在传输中和存储时如何受到保护？

您的部署和基础设施模型是什么？

平台是否符合国际隐私基准？

在不损害 E2EE 的情况下，您如何处理人力资源调查？

谁可以内部访问我们的租户数据？

当我们离开时，我们的数据会怎样？

文档与联系方式