Question 1

How is organizational data protected in transit and at rest?

Accepted Answer

LINK operates on a strict End-to-End Encryption (E2EE) architecture. Messages are encrypted locally on the sender's device and can only be decrypted by the verified recipient. LINK's managed infrastructure functions solely as a secure transport layer. We hold zero decryption keys and cannot read, scan, or access the contents of your internal communications.

Question 2

What is your deployment and infrastructure model?

Accepted Answer

LINK is delivered as a fully managed SaaS environment. This zero-trust, turnkey approach provides immediate, secure deployment without the extensive DevOps overhead required to harden and maintain self-hosted open-source alternatives.

Question 3

Does the platform meet international privacy and compliance benchmarks?

Accepted Answer

LINK is built to GDPR and UK GDPR requirements, with a DPA, EU Standard Contractual Clauses and the UK IDTA available to enterprise customers. We do not hold a SOC 2 Type II attestation or ISO 27001 certificate today; external penetration testing and independent third-party audits are planned and the reports will be published here.

Question 4

How do you handle HR investigations without compromising E2EE?

Accepted Answer

Users can flag policy violations by submitting encrypted, watermarked incident reports directly from their client. Reports are pseudonymous, not anonymous: the reporter's identity is withheld from HR by default, but LINK retains the reporting account's username and can be compelled to disclose it under a binding legal order. Only your authorised HR personnel hold the keys to decrypt these specific reports. HR may ask a reporter to identify themselves voluntarily and the reporter may refuse.

Kompromisslose Sicherheit. Absolute Compliance.

Sicherheitssäulen

DSGVO-konform

Ende-zu-Ende-verschlüsselt (E2EE)

Vollständig verwaltetes SaaS

Globale Unternehmenslokalisierung

CISO- & Sicherheitsarchitektur-FAQ

Bereit, die interne Kommunikation Ihrer Institution zu sichern?

Sicherheitssäulen

DSGVO-konform

Ende-zu-Ende-verschlüsselt (E2EE)

Vollständig verwaltetes SaaS

Globale Unternehmenslokalisierung

CISO- & Sicherheitsarchitektur-FAQ

Wie werden Organisationsdaten während der Übertragung und im Ruhezustand geschützt?

Wie sieht Ihr Bereitstellungs- und Infrastrukturmodell aus?

Erfüllt die Plattform internationale Datenschutz- und Compliance-Standards?

Wie handhaben Sie HR-Untersuchungen, ohne die E2EE zu kompromittieren?

Bereit, die interne Kommunikation Ihrer Institution zu sichern?