Welcome to the MuchSkills Security & Privacy hub. This page serves as a comprehensive overview of how we design, build, and operate our platform with security, privacy, and resilience at its core.

We work closely with customers in regulated industries — including fintech, healthcare, and professional services — to ensure our practices align with global standards and meet the expectations of your risk and compliance teams. If you have any questions please contact [email protected]

Overview

• Product: MuchSkills – SaaS platform for skills management, workforce planning, and strategic talent visibility
• Hosting: 100% cloud-native, hosted in AWS Stockholm (Sweden)
• Compliance alignment: GDPR-ready, using subprocessor vendors with ISO 27001, SOC 2, and CSA STAR certifications
• Data control: Customers retain ownership of their data at all times
• Self-service tools: Users and admins can access, update, or delete their data anytime

Explore our security domains

Subprocessors & data residency

A transparent list of third-party services involved in data handling, their purpose, and location. Includes MongoDB Atlas, OpenAI, Forest Admin, AWS, Stripe, and more.

Subprocessors & data residency

Infrastructure & application security

How we design and secure the MuchSkills platform — including secure SDLC, production access limits, encryption, and our cloud architecture.

Infrastructure and application security

Data privacy & GDPR

What data we collect, how it's used, and how we uphold privacy rights through anonymization, consent, and export/delete features.

Data privacy and GDPR compliance