Security and compliance built into every layer
Staffing agencies handle confidential personal data, sensitive medical certifications, and commercial client billing rates. Crewdo ensures your agency meets the highest UK standards.
Multi-Tenant Data Isolation
Every agency operates within a logically isolated boundary. Tenant identifiers are enforced at the database query layer, ensuring that no agency can ever access or leak another subscriber’s candidates, vacancies, or rates.
UK GDPR & DPA 2018 Compliance
Built-in right to erasure, data portability exports, explicit candidate consent logging, and granular data retention policies aligned with UK regulatory frameworks.
End-to-End Encryption
All network transit is protected via modern TLS 1.3 encryption. Private candidate documents (CVs, passports, professional registrations) are encrypted at rest with AES-256.
Tamper-Evident Audit Logging
Every booking confirmation, timesheet amendment, rate modification, and document verification generates an unalterable audit trail timestamped with user credentials.
Role-Based Access Control (RBAC)
Granular permissions separate Agency Administrators, Recruiters, Finance Personnel, Locum Workers, and Client Hiring Managers, preventing unauthorized data views.
Private Signed URL Document Access
Sensitive compliance documents are never stored in public directories. File access is granted strictly through short-lived, cryptographically signed time-limited URLs.
Compliance with the Conduct of Employment Agencies Regulations
Crewdo workflows are designed in strict accordance with the **Conduct of Employment Agencies and Employment Businesses Regulations 2003** (SI 2003/3319). The platform enforces pre-assignment checks, verified confirmation notices to workers, terms of agreement capture, and complete 6-year retention of booking and timesheet records.