Technology · Legal · Procurement

A clear architecture. Evidence you can review.

Understand how EVA connects to your HR systems, separates customer data and keeps decisions under human oversight.

Explore the technical FAQ ↓

Platform architecture

A decision layer connected to your HR systems.

Your systems

HRIS & HCM
ATS & talent pools
VMS
Agreed source files

Scoped data connections →

EVA Workforce Decision Intelligence

EVA Competency Mapping

Map competencies with employee and manager perspectives.

EVA Team & Leadership Analytics

Understand leadership alignment, team experience and development priorities.

EVA Workforce Planning

Compare current capability with future workforce demand.

EVA Talent Matching

Start with natural language or a structured prompt; review criteria and reasons.

EVA Full Automated & Approvals Platform

Connect the agreed capabilities with human approvals, automation and scoped system actions.

Governed data & access

People and roles · Competency frameworks · Evidence and audit records

Dedicated tenant data · Access controls · Separate transactional, vector and analytics services

Reviewed outcomes

Development priorities
Team and leadership insight
Workforce plans
Reviewed talent decisions

Functional architecture. Connections, capabilities and deployment configuration are agreed in scope.

Assurance evidence

Independent scrutiny. Reviewable documentation.

ISO/IEC 27001:2022 certified.

Certifying body INTERCERT, registration IC-IS-2412002. Certified since December 2024, current through the 2027 recertification cycle. Independently verifiable at iafcertsearch.org.

SOC 2 Type II attested.

Our report covers all five Trust Service Criteria. It is confidential under the auditor's terms and available under NDA on request.

Penetration testing.

Independently tested against the OWASP Top 10 (2025). All findings remediated.

Technical & procurement FAQ

The questions that matter before approval.

Hosting & integrations: Where is EVA hosted?

AWS is the primary hosting platform, with EU hosting available. Required regions, data residency and transfer arrangements are agreed for the deployment. Customer-hosted and alternative-cloud configurations require a specific technical and delivery scope.

Data & access: How is our data separated from other customers?

The tenant architecture uses a dedicated database or server per tenant, with separate tenant storage. Tenant context is carried through service calls. Transactional records, vector search and analytics use separate data services. The deployment design documents the isolation boundaries for your environment.

Data & access: Can we use our identity provider and control access?

EVA supports SAML 2.0 and OpenID Connect single sign-on, with role-based and attribute-based access controls. Permissions govern functions and records, including the people a hiring manager can access. Identity configuration, administrator access and organisational boundaries are agreed during implementation.

AI & oversight: Where does AI contribute, and who makes the decision?

Language models support conversations, prompt interpretation, summaries and explanations. Talent matching uses configurable, weighted criteria with reviewable scoring. The same inputs and configuration produce the same matching result. Consequential recommendations go to a named human reviewer; the reasoning and review are recorded.

Data & access: How are personal data and retention handled?

Access, retention, deletion and processing responsibilities are documented for the deployment. Customer data is not used to train models for other organisations. The DPA and sub-processor list support review of processing, model providers and any required international-transfer arrangements.

Hosting & integrations: How does EVA connect to our HR systems?

An initial project can use agreed files. Ongoing integration can use documented APIs, webhooks and asynchronous events. Confirm source ownership, fields, permissions, refresh requirements and permitted actions. Connector availability and additional integration work are scoped and tested before connected transactions are enabled.

Operations & assurance: How are releases, resilience and support managed?

Development, staging and production environments are separated. Engineering and testing cover automated, end-to-end, regression and load testing. Operations monitor capacity, errors and security events, with backups, recovery testing and incident escalation. Support hours, availability targets, recovery objectives and remedies belong in the agreed SLA.

Operations & assurance: What evidence can procurement and legal review?

Request the ISO certificate, SOC 2 Type II report, penetration-test evidence, DPA and sub-processor list. The technical review also covers the proposed architecture, data flows, access model, recovery arrangements and SLA. Confidential reports are shared under NDA; document scope and validity are reviewed as part of due diligence.

8 questions to explore

Hosting & integrations

Where is EVA hosted?

You might also want to know

Did this answer your question?

AI transparency and accountability →Privacy →

Request the technical and assurance pack.

Share your RFP or review requirements. We will identify the relevant documentation, proposed configuration and contractual commitments with your technology, legal and procurement teams.

Request the technical and assurance pack →