Last updated: [11/2025]
Certify Assessment Solutions (CAS) is committed to protecting personal data, maintaining strong security controls, and complying with UK GDPR and EU GDPR principles.
1. Who we are
Certify Assessment Solutions Ltd (“CAS”) is committed to protecting personal data, maintaining appropriate technical and organisational security measures, and complying with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and applicable data protection laws.
CAS is part of the International Assessment Group (IAG), which provides shared governance, information security, risk management, and compliance oversight across its operating companies:
Each operating company is responsible for the personal data it processes in the course of delivering its services, in accordance with applicable law and contractual arrangements.Their respective Privacy Policies explain these roles in detail.
2. Our compliance foundations
We follow:
We are on course to obtain formal ISO certification by February 2026.
3. Hosting & data storage
Our platforms use AWS and Azure secure infrastructure.
We do not store candidate or customer data outside approved regions.
4. Security Measures
We implement:
5. Use of AI technologies
AI does not make final decisions; human review is always required.
See our Use of AI page for more details.
6. Your rights
Individuals have rights under GDPR, including access, rectification, deletion, restriction, and objection.
Requests can be made via:
7. Contact the Privacy Team
For questions regarding GDPR or security compliance:
Privacy@iagassessment.com
