Get the documentation your assessment review needs
SOC 2 Type II audited. ISO 27001 certified. EU or US hosting on AWS, and single sign-on with SAML 2.0.
Validated assessments since 2009 SOC 2 Type II ISO 27001
Trusted by teams at
Certifications and audits your reviewers can file
SOC 2 Type II
Audited annually. The current report is in the Codility Trust Center, available under NDA.
ISO 27001
Certified. The certificate is in the Codility Trust Center.
GDPR
Candidate data is processed in line with the General Data Protection Regulation. A data protection impact assessment, a DPIA, is available on request.
CCPA
Codility meets the requirements of the California Consumer Privacy Act.
WCAG 2.2 AA
The candidate and reviewer experience meets WCAG 2.2 AA. A Voluntary Product Accessibility Template, a VPAT, is available.
Hosting and access
Codility offers EU and US hosting on AWS. Your account is provisioned in the region your data governance requires.
Use your identity provider with single sign-on via SAML 2.0, set up with the Codility team. Accounts are created at first sign-in.
Assessments run in the browser. When hidden app detection is enabled, candidates also install Codility’s lightweight desktop app. They are told before starting.
Data and AI governance
An assessment collects the candidate’s name, email, work and timing, plus any behavioral signals, proctoring, identity images and AI Assistant conversation your team enables.
Proctoring recordings are retained for 30 days.
No AI or machine learning makes hiring decisions. Selected task types use fixed-rule scoring. AI Assistant interactions are recorded for human review. Interviewers make rubric judgments. Codility gives your hiring team the evidence, and your team makes the final decision.
The Technical Manual documents task design, scoring and adverse impact analysis for legal review.
Source: Codility product documentation, proctoring retention.
Request the documentation
Security documents are in the Codility Trust Center, including the SOC 2 Type II report, the ISO 27001 certificate, the data processing agreement and penetration testing. Public documents open straight away. Restricted documents open once an NDA is in place. Request everything else through Talk to us.
| Document | What it covers | Access | Where to get it |
|---|---|---|---|
| SOC 2 Type II report | Independent audit of Codility’s security controls, latest annual report | Under NDA, in the Trust Center | Trust Center |
| ISO 27001 certificate | Certification of Codility’s information security management system | In the Trust Center | Trust Center |
| Data protection impact assessment | How candidate data is processed and retained under GDPR | On request | Request it |
| VPAT | Accessibility conformance to WCAG 2.2 AA | On request | Request it |
| Technical Manual | Methodology record that follows the Standards for Educational and Psychological Testing, the benchmark psychologists use to judge whether a test is valid and fair: task design, scoring, adverse impact analysis | On request | Request it Methodology |
| Security questionnaire support | Completed responses to your security and vendor questionnaire, with supporting documents. A completed CAIQ is in the Trust Center | On request | Request it CAIQ in the Trust Center |
Questions your reviewers ask
Related evidence
Bring your procurement requirements and documentation checklist
We’ll walk your security and legal reviewers through every document on this page.