RedRadar publishes its commitments in writing.
The documents below describe how we handle data, who we choose to work with, what conduct we require from clients, and the standards we hold ourselves to.
They are written in plain language, kept current, and designed to be read by procurement counsel, compliance teams, prospective clients, and anyone evaluating whether RedRadar is the right partner for serious work.
We update these documents as our practices, our scale, and the legal environment evolve. Where a change is material, the updated date at the top of each document reflects when the change was made. If you have a question that isn't answered here, or if you need additional documentation as part of a procurement or due-diligence process, contact us.
Privacy Statement
How we collect, use, and protect personal data when you visit our website, contact us, subscribe to our blog, purchase or attend training, or engage with us as a client, partner, or candidate. Covers US state privacy laws, and the controller / processor distinction that governs platform use by clients.
Read the Privacy Statement →Candidate Privacy Notice
How we handle personal data about job applicants and candidates — what we collect, why, how long we keep it, and the rights candidates have over their data. Covers identity verification, background checks, and clearance processes for roles that require them.
Read the Candidate Privacy Notice →Human Rights Statement
How we think about human rights in the context of what we build, who we build it for, and where we draw lines. Describes our commitments under the UN Guiding Principles on Business and Human Rights and the OECD Guidelines for Multinational Enterprises, our client-evaluation process, and the controls we use to mitigate the risk of misuse.
Read the Human Rights Statement →Acceptable Use Policy
The conduct expected of clients, authorized users, and other parties who access or use the RedRadar platform. Sets the minimum baseline alongside the Master Services Agreement and other contractual terms. Covers permitted use, prohibited use, client responsibilities, and enforcement.
Read the Acceptable Use Policy →Information Security
Our approach to information security — principles, architecture, data handling, vendor posture, personnel, incident response, compliance, and threat awareness. A public overview suitable for procurement evaluation, with detailed documentation provided privately on request.
Read the Information Security overview →Subprocessors
A current list of material subprocessors — hosting, infrastructure, identity management, payment processing, and other services — is available on request to clients and prospective clients under appropriate confidentiality terms. We notify clients of material changes in accordance with applicable agreements.
Available on requestSupply-chain integrity
We evaluate any potential vendor against criteria including jurisdiction, ownership, and security posture. We do not engage vendors whose ownership, jurisdiction, or compliance posture would create unacceptable risk for the missions our clients support. Vendor changes affecting client engagements are notified in accordance with applicable agreements.
Policy in effectQuestions, or documentation for procurement and due diligence: demo@redradar.ai