The answers your ops or compliance lead will ask for, up front. The full technical picture lives on the security page, and a standard DPA is a single email away.
Your projects, schedule, bookings, rates, applicant snapshots and roster live behind your account's wall. Other companies cannot see who applied to you, what you pay, or who is on your team. The only thing public to matched technicians is the job post you chose to publish.
Technician data arrives by consent: an application carries the snapshot the tech approved, a roster entry exists because the tech accepted. That consent model protects you too, it is what makes the platform's data lawful for you to use under UK GDPR.
Bookings, projects and applicant history are part of the daily backup cycle. If you leave, deletion is complete; if you need your data first, we export it on request.
Standard Data Processing Agreement on request, sub-processor list on the security page, and direct answers to any security questionnaire: hello@cowstail.app with "Security" in the subject.
More detail: Security & data protection · Privacy policy · Cowstail for companies