Security should be specific, reviewable, and honest.
EvalHero supports operational records that can be sensitive, including evaluations, signatures, attachments, policies, and personnel-related workflows. This page explains the security controls EvalHero implements today, written to be specific, reviewable, and honest.
Why organizations need a connected readiness system
EvalHero supports operational records that can be sensitive, including evaluations, signatures, attachments, policies, and personnel-related workflows. This page explains the security controls EvalHero implements today, written to be specific, reviewable, and honest.
Common problems you might be facing
- Prospective buyers need specific information before they can evaluate fit and risk.
- Vague claims create uncertainty and make procurement harder.
- We document the important expectations with you before implementation or contracting.
What EvalHero helps the organization do
Identity and authentication
Describe supported login, password hashing, OTP or magic-link behavior, session protection, and administrative controls in language validated by engineering.
Role-based permissions
Explain how organizations assign access to modules, records, analytics, administration, and workflow responsibilities.
Organization boundaries
Describe tenant isolation and the testing used to prevent one organization from accessing another organization’s records.
Encryption and storage
Document encryption in transit, applicable encryption at rest, file storage providers, backup controls, and key-management responsibility.
Audit and operational logging
Explain what security, access, workflow, and administrative events are logged and how long they are retained.
Incident response and disclosure
Provide a security contact, responsible disclosure path, customer-notification approach, and high-level incident response process.
How the workflow works
- Explore the workflows below and identify the ones that match your organization.
- Confirm any claim or term that materially affects procurement or risk.
- Discuss open questions with EvalHero.
- Document the agreed scope, responsibilities, and next steps.
Operational outcomes
- Fewer surprises during procurement
- Clearer expectations
- A more focused implementation conversation
- Better trust through verifiable information
Important boundaries
- EvalHero supports the organization’s training, evaluation, documentation, and workflow process. It does not replace the organization’s legal, medical, employment, regulatory, accreditation, or operational judgment.
- The organization defines the applicable standard, authorized roles, retention requirements, passing rules, and final decisions.
Frequently asked questions
How is access to EvalHero records controlled?
Access is governed by organization membership, assigned roles, permissions, workflow responsibility, and the sensitivity of the underlying record.
Are records separated by organization?
Yes. EvalHero is designed around organization-level data boundaries so users access records within the organizations and permissions assigned to them.
Are important workflow actions traceable?
Yes. Key actions such as assignment, completion, approval, rejection, signature, attestation, and dispute activity are associated with the responsible user and record history.
Does EvalHero guarantee an organization’s regulatory compliance?
No. EvalHero provides security, documentation, permission, and workflow capabilities. Each organization remains responsible for determining and meeting its legal, regulatory, contractual, and accreditation obligations.
More than software
A partner in your training program—not just a platform.
EvalHero works alongside departments and organizations of every size—from a 3-person volunteer crew to a 3,000+ member agency. We don’t hand you a login and disappear: we help you build your training program, structure your evaluations, and set the readiness goals your organization is aiming for.
White-glove onboarding
We migrate your records, recreate your forms and taskbooks, and configure workflows with you—done for you, not dumped on you.
Program design help
We help structure training tracks, evaluation cycles, and approval chains that match how your organization actually operates.
Goals & readiness planning
We work with your leadership to define readiness targets and the reporting to prove progress—then help you get there.