How we protect your documents and data
Your CV and evidence describe your whole career. Here is exactly what happens to them when you use the Endorsa assessment, stated plainly.
Last updated: 30 July 2026
In transit
Every connection to this website and to the assessment application (app.endorsa.uk) is encrypted with TLS (HTTPS). Documents are never transferred over an unencrypted connection.
Where your documents live
Uploaded documents are processed through the assessment application hosted on Railway in the United States. Operational records may also use the service providers identified in our privacy policy. Assessment downloads use token-protected links and are not listed publicly.
Upload only what the assessment needs
Upload material relevant to the Digital Technology endorsement, such as your CV, draft statements, draft recommendation letters and supporting career evidence. Do not upload passports, visa records, medical or criminal records, bank statements, payment-card details or identity documents. Redact unrelated third-party personal information before uploading.
Who can see them
- You - through token-protected links that are personal to your assessment and are not listed publicly.
- Authorised Endorsa personnel - where access is required to operate, review or support the assessment service.
- Service providers - where processing is required to host the application, analyse submitted documents, deliver files, send service emails or take payment, as described in our privacy policy.
How the AI processes your documents
Your documents are analysed using Anthropic's Claude models under commercial API terms. Anthropic states that commercial API inputs and outputs are not used to train its generative models by default; see Anthropic's published data-use explanation. The automated process produces a non-binding readiness report; it does not make an endorsement or visa decision.
You can ask us to correct inaccurate input data, explain the assessment process or review an operational concern by emailing support@endorsa.uk.
Payments
Payments are processed by Stripe. We never see or store your card details.
Deletion on request
Email support@endorsa.uk from the address you used for your assessment to request deletion of uploaded documents and assessment outputs. Requests are handled subject to applicable legal and record-keeping requirements. Your rights under UK GDPR, including access, correction and erasure, are set out in our privacy policy.
What we deliberately do not do
- Uploaded documents are not published or used as public samples without explicit written consent.
- Testimonials or case details require explicit written consent before publication.
- Uploaded assessment documents are not sent to advertising platforms.