Security and compliance

Your data is handled by trained employees in controlled workflows. We never use client data to train our own models and do not sub-contract labeling to crowd platforms.

ISO/IEC 27001:2022SOC 2 Type IIRegistered with Kenya's ODPCKenya Data Protection Act 2019GDPR / EU SCCs availableHIPAA BAA on request

Facility security

Two delivery centres in Nairobi (Westlands and Tatu City) with 24/7 guarding and CCTV
Biometric access control on every production floor
Clean-desk policy; phones, bags and paper stay in lockers outside secure floors
Backup power and dual fibre links from separate providers

Data protection

Encryption in transit (TLS 1.2+) and at rest (AES-256)
Data hosted in your choice of region: EU (Frankfurt), US or South Africa
Workstations stream data through a virtual desktop; nothing is stored locally
USB ports, printing, screenshots and clipboard export are disabled

Access control

Annotators see only the tasks assigned to them, never full datasets
Role-based access with SSO and mandatory MFA for staff and clients
Quarterly access reviews and immediate revocation on staff exit
Complete audit logs of every view and edit, available on request

People

Background checks including police clearance (Certificate of Good Conduct)
Confidentiality agreements signed by every employee
Security and data-privacy training at onboarding and every six months
Your own NDA can be signed by each annotator on your project

Retention and deletion

Source data deleted 30 days after project completion by default, or sooner on request
Certificate of deletion issued within 5 working days
Backups are encrypted and expire within 35 days

Testing and incident response

Annual third-party penetration tests; summary shared under NDA
Responsible disclosure: security@initlabel.com
Clients notified of any confirmed breach within 24 hours, with regulatory notifications handled as required

Fair work is part of quality

Well-supported annotators make fewer mistakes and stay longer.

Responsible workforce practices are part of the quality system, especially when projects involve sensitive or demanding content.

Fair employment

Full-time employment structures, statutory benefits and paid leave where applicable.

Sensitive-content controls

Opt-in projects, exposure limits, mandatory breaks and access to counselling.

Wellbeing support

Confidential access to licensed psychological support for employees and their families.

Independent oversight

Wage and welfare policies can be reviewed through independent labour-rights processes.