

At Palm, we take security and data protection very seriously. We understand that your talent data is one of your most valuable assets, and we are committed to safeguarding it from unauthorized access, misuse, or loss. We comply with the General Data Protection Regulation (GDPR) and other relevant laws and regulations, ensuring that your data is processed lawfully, fairly, and transparently.


We employ encryption, hashing, and tokenization techniques to protect your data in transit and at rest. We also implement regular security audits, vulnerability scans, and penetration tests to identify and fix any potential issues.
We follow the principle of least privilege, granting access to data only to authorized personnel on a need-to-know basis. We also implement a role-based security policy, data classification, and data leakage prevention (DLP) mechanisms.


We host our platform on secure cloud servers that are compliant with ISO 27001, SOC 2, and other industry standards. We use firewalls, antivirus software, and intrusion detection systems to prevent unauthorized access or attacks. We also backup your data regularly to ensure business continuity in case of any unforeseen events. We host each client’s data on dedicated servers, ensuring access security, performance, and data isolation.
We host our data in data centers in France that meet the standards of security access, data redundancy, and environmental protection.



We have a dedicated security team that monitors and responds to any security incidents or alerts. We also train our employees on security awareness and best practices, and require them to sign confidentiality agreements.
We adhere to a strict privacy policy that outlines how we collect, use, store, and share your data. We do not sell or rent your data to any third parties without your consent. We provide traceability devices for all user actions and accesses, conforming to the security standards.


We develop our platform using a “DevSecOps” approach, ensuring more reliability and solidity of our software.
This means that we integrate security into every stage of our development lifecycle, from planning to deployment.



