Question 1

How is organizational data protected in transit and at rest?

Accepted Answer

LINK is designed around end-to-end encryption. Messages are encrypted on the sender's device and decrypted only by the verified recipient; our managed infrastructure acts as a transport layer and does not hold message decryption keys. Data at rest on our infrastructure is encrypted with AES-256, and all transport is TLS 1.3. This describes our architecture, it has not yet been validated by an independent third-party audit, and we will publish those results here when they exist.

Question 2

What is your deployment and infrastructure model?

Accepted Answer

LINK is delivered as a fully managed, multi-tenant SaaS environment with per-tenant isolation. This turnkey model provides secure deployment without the weeks of server hardening, database hosting and ongoing patching required to maintain self-hosted open-source alternatives. Customers do not run, patch or scale any infrastructure.

Question 3

Does the platform meet international privacy benchmarks?

Accepted Answer

LINK is built to GDPR and UK GDPR requirements. A Data Processing Agreement with EU Standard Contractual Clauses and the UK International Data Transfer Addendum is available to enterprise customers, alongside a contractual 72-hour breach notification commitment. We do not currently hold a SOC 2 Type II attestation or ISO 27001 certificate; external penetration testing and independent audits are planned and the reports will be published here.

Question 4

How do you handle HR investigations without compromising E2EE?

Accepted Answer

Users flag policy violations by submitting encrypted, watermarked incident reports from their client. Only your organisation's authorised HR or compliance officers hold the keys to decrypt those specific reports, LINK cannot read them, and no blanket surveillance of private chats is possible. Reports are pseudonymous rather than anonymous: the reporter's identity is withheld from HR by default, but LINK retains the reporting account's username and can be compelled to disclose it under a binding legal order. HR may ask a reporter to identify themselves voluntarily and the reporter may refuse.

Question 5

Who can access our tenant data internally?

Accepted Answer

Access to production systems is restricted to a small number of named engineers, requires multi-factor authentication, and is logged. No LINK employee can read message content, because we do not hold the decryption keys. Support access to tenant metadata is time-boxed and recorded in an audit log available to your administrators on request.

Question 6

What happens to our data when we leave?

Accepted Answer

On termination, tenant data is exported on request in a machine-readable format and then deleted from live systems within 30 days, and from backups on the next rotation cycle (maximum 35 days). Deletion is confirmed in writing.

信任與安全中心

CISO 常見問題

文件與聯繫方式

CISO 常見問題

組織資料在傳輸和靜止時如何受到保護？

您的部署和基礎設施模型是什麼？

該平台是否符合國際隱私基準？

如何在不損害 E2EE 的情況下處理 HR 調查？

誰可以在內部存取我們的租戶資料？

當我們離開時，我們的資料會發生什麼事？

文件與聯繫方式