Your Data, Protected
Security isn't an afterthought at Milly. We handle sensitive candidate data every day, and we've built our infrastructure to keep it safe.
UK Data Residency
All data is processed and stored on servers located in the United Kingdom. Your candidate data never leaves the country.
Encryption
Data is encrypted in transit using TLS 1.2+ and at rest using AES-256. Call recordings and transcripts are encrypted with per-tenant keys.
Access Controls
Role-based access with multi-factor authentication. Principle of least privilege applied across all systems. Access logs retained for audit.
Penetration Testing
Regular third-party penetration testing and vulnerability assessments. Findings are remediated promptly and verified.
Incident Response
Documented incident response plan with defined escalation paths. Breach notification to affected clients within 72 hours as required by GDPR.
Audit Trail
Every call, message, and action on the platform is logged with timestamps. Full audit trail available for compliance reporting.