Document Handling Policy

Draft — pending legal review. This text has not yet been approved by a qualified adviser and must not be treated as final.

Status

Draft. Document upload is not yet available.

Controls in place in the design

Files are stored privately (no public links); only the candidate who uploaded a file can open it; file type is checked from the file contents and size limits apply; files are never sent as email attachments; no facial recognition is performed.

Not yet in place

Automatic malware scanning, staff access with role separation, formal access logging and automatic deletion are not yet built. Until malware scanning exists, uploaded files are labelled as awaiting a security check and are never treated as verified.