Privacy notice
Effective 20 July 2026
AXIOM ARISE uses the contact details you provide to create and secure your account, operate your trial, respond to purchase enquiries, and provide requested onboarding or service communications.
Account and enquiry information
We record your name, work email, organisation name, consent choice, security events, and the information you submit in a purchase enquiry. These details are used to deliver the service, prevent abuse, respond to you, and keep evidence of your request.
Optional marketing
Marketing messages are optional and require a separate unchecked choice. Declining marketing does not prevent account creation, a trial, or a purchase enquiry. Service and security messages may still be sent when needed to operate your account or respond to a request.
CRM workspace data
Your organisation controls the candidate, client, placement, compliance, payroll, and document data entered in its workspace. AXIOM ARISE acts as the service provider for that content and does not use it for unrelated marketing. Workspaces are separated by organisation. Authenticated users can see only the workspace and features permitted by their active membership and assigned role. Records are shared with other authorised members of the same organisation where their role permits it; they are not private to the individual who entered or uploaded them.
Document uploads and storage
All new uploads in Recruitment CRM and Payroll Management CRM are limited to validated PDF or PNG files with a maximum upload size of 5 MB. Files are stored under random identifiers that do not contain candidate, client, or original file names. The original name and record association are kept inside encrypted workspace metadata.
Uploaded files, workspace state, audit records, and retained state backups are encrypted at rest using authenticated AES-256-GCM encryption. HTTPS protects supported production traffic in transit. Encryption normally adds a small amount of metadata and does not reduce a multi-megabyte document to 1 KB. The service must retain the encrypted file content so an authorised user can recover the original document.
Who can access workspace content
Access is enforced through email authentication, signed sessions, active organisation membership, route permissions, document permissions, and audit records. Organisation administrators and other roles granted candidate, client, compliance, payroll, or audit access may be able to view or manage relevant records. AXIOM ARISE personnel should access customer content only where necessary to operate, secure, investigate, recover, or support the service and subject to appropriate operational controls. Encryption does not make data anonymous, and no online service can promise that authorised administrators or a compromised application can never access decrypted content.
Retention and security
We retain account, consent, enquiry, workspace, upload, backup, audit, and security records for as long as reasonably needed to provide and recover the service, resolve requests, protect the platform, and meet applicable obligations. Upload size and workspace storage limits help control capacity. No online service can promise absolute security or uninterrupted availability.
Security incidents and recovery
The service uses encrypted persistent storage, integrity-checked writes, state backups, audit trails, upload validation, rate limits, tenant isolation, and health checks to reduce the risk of loss, tampering, and unauthorised access. If an incident occurs, access may be restricted while affected credentials, sessions, systems, and encryption keys are investigated or rotated. Recovery depends on the availability and integrity of encrypted backups and the required decryption keys. Organisations should maintain their own approved exports or source copies where continuity requirements demand an independent recovery copy.
Suspected personal data incidents are assessed so the organisation and AXIOM ARISE can take containment, recovery, evidence-preservation, communication, and any applicable regulatory-notification steps. Temporary loss of availability may itself be a personal data incident.
Your choices
You may ask about your personal information, correct contact details, withdraw optional marketing consent, or request deletion where applicable. Withdrawing marketing consent does not affect prior lawful use or essential service messages.
Use the purchase enquiry form to contact AXIOM ARISE about privacy questions, access, correction, or deletion.