SponsorGuard
Menu

Security and review boundaries

SponsorGuard is built for sponsor compliance operations that handle sensitive immigration and HR evidence. The public surface emphasises controlled access, data minimisation, clear ownership, and authorised review before action.

Security posture

Practical controls for sponsor licence compliance workflows.

SponsorGuard keeps compliance tracking, evidence preparation, reminders, and audit readiness within a controlled operating model for employers and adviser teams.

Controlled access

Role-based workspace planning helps separate employer, adviser, and evaluator responsibilities for licence, worker, and evidence records.

Evidence ownership

Document workflows are organised around review status, request history, owners, and audit preparation context.

Operational accountability

Risk views and reminders are designed to surface work for people to review, decide, and record.

Review boundaries

AI-assisted outputs require authorised human review before any submission or action.

Deadline visibility

RTW, visa, eVisa, SMS, absence, and renewal signals keep time-sensitive work visible without making legal decisions.

Public data handling

Keep sensitive worker data out of public forms.

SponsorGuard access discussions can cover workflow needs without collecting worker personal data through the public website. Please do not include passport numbers, visa numbers, dates of birth, or worker personal data in this public form.

  • Public access requests should not include passport numbers, visa numbers, dates of birth, or worker personal data.
  • Access is reviewed for invited evaluators before product workspace access is granted.
  • Technical controls include application-layer AES-SIV encryption of passport numbers and dates of birth, MFA, tenant isolation, and audit logging of sensitive actions.
  • SponsorGuard messaging keeps legal advice, visa strategy, and Home Office reporting decisions outside product automation.
  • AI-assisted outputs require authorised human review before any submission or action.

Documents and contact

The security and data-protection detail, in writing.

Our Article 32 technical and organisational measures are set out in Annex C of the Data Processing Agreement, every third party that can reach your data is listed on the sub-processors page, and what we send to our AI provider is set out in the AI Disclosure. We have no third-party security certifications (such as ISO 27001 or SOC 2), and no independent penetration test has been completed yet. An assurance programme is planned.

Report a suspected security issue to support@sponsorguard.com. Need a security questionnaire completed or a signed DPA counterpart? Email privacy@sponsorguard.com.