Security & Trust
Security is foundational to how we deliver.
TalentSavvy helps organizations improve software delivery using data from their technology teams and software development lifecycle tools. We recognize that this information can be sensitive, particularly when it includes details associated with individual technology professionals.
Our approach combines established cloud infrastructure, enterprise identity integration, layered access controls, customer data isolation, and independent security assurance.
Built on Microsoft Azure
Built on established cloud infrastructure.
TalentSavvy ImproveTeam and ManageTeam are hosted in the United States on Microsoft Azure and share the same production application and data infrastructure.
The applications run on Azure Kubernetes Service (AKS), with Azure Cosmos DB for PostgreSQL providing application and analytical data storage. Azure Key Vault manages sensitive credentials, while Cloudflare provides an additional layer of protection for incoming traffic.
The architecture separates application components and data storage and uses application-level authorization and database-level controls to restrict access to customer information.
Protecting customer data
Multiple layers of protection.
ImproveTeam processes software delivery metadata from software development lifecycle tools, as well as limited personal information associated with technology staff.
ImproveTeam and ManageTeam share layered authentication, authorization, and customer data isolation controls to restrict access to customer information:
- Enterprise authentication
- Support for Microsoft Entra ID and SAML 2.0 identity providers enables integration with client identity environments. One-time passcode authentication is also supported as a fallback.
- Permission-based access
- Application permissions govern access to privileged functions and authorized products.
- Customer data isolation
- Application-level authorization is reinforced by PostgreSQL Row-Level Security policies that restrict data access according to verified customer and product context.
These database-level controls provide an additional layer of protection beyond application permissions alone.
Data protection
Protecting data in transit, at rest, and in use.
The following encryption and credential management controls apply to the shared production architecture for ImproveTeam and ManageTeam.
Encryption in transit
External communications use HTTPS/TLS. The application architecture specifies TLS 1.3 for data in transit and redirects HTTP traffic to HTTPS.
Encryption at rest
Production data stored in Azure Cosmos DB for PostgreSQL is protected by the service's default AES-256 encryption at rest.
Credential management
Database credentials, external tool API tokens, and application signing secrets are managed through Azure Key Vault or encrypted database storage. Application services retrieve secrets at runtime rather than embedding them in source code.
Responsible access
Access based on business need.
Access to client production data for ImproveTeam and ManageTeam by TalentSavvy personnel is restricted to authorized personnel and operational needs.
Our approach is designed to limit access to the information and functions needed for an authorized purpose, while maintaining logical separation between customers within the shared infrastructure.
Independent assurance
Independently assessed. Built on accountability.
TalentSavvy's security practices are supported by independent assessment and assurance. Our approach combines an established information security management system, independent examination of controls, and application security testing.
ISO/IEC 27001:2022
Information Security Management System certification
TalentSavvy COM LLC is certified to ISO/IEC 27001:2022. The certified Information Security Management System covers the ImproveTeam and ManageTeam SaaS products and supporting functions, including IT infrastructure, data privacy, IT and data security, human resources, physical security, and legal.
SOC 2 Type II
Independent SOC 2 Type II report
TalentSavvy has an independent SOC 2 Type II report covering controls relevant to security, availability, and confidentiality.
The report covers the period September 1, 2025 to February 28, 2026. The report and supporting details are available to prospective clients as part of an appropriate security review process.
Application security testing
TalentSavvy engages independent specialists to assess application security. Relevant documentation can be discussed with prospective clients as part of their vendor assessment and due diligence process.
Resilience and recovery
Designed with recovery in mind.
ImproveTeam and ManageTeam share production Azure infrastructure designed to support service resilience. The shared application environment uses multiple Kubernetes nodes, and the managed database service provides backup and recovery capabilities.
For this shared production architecture, our documented baseline recovery objectives are a Recovery Time Objective (RTO) of 24 hours and a Recovery Point Objective (RPO) of 24 hours. These are recovery objectives, not guaranteed recovery times or service-level commitments.
Multi-region deployment can be considered where a client's business continuity requirements call for additional resilience, subject to the associated architecture and cost.
Have questions about security?
We understand that evaluating a technology provider involves more than evaluating its features. We welcome conversations with technology, security, privacy, and procurement teams about their requirements.
Contact TalentSavvy to discuss your organization's needs and request relevant security documentation.