Performance management involves information that matters to people. Our approach starts with careful data handling, clear access requirements and evidence you can evaluate with your IT, HR and privacy teams.
Discuss your security requirementsThe controls below describe the public New Dynamics website and its enquiry and guide-download services. Security arrangements for an organisation’s software workspace need to be confirmed for the service, configuration and contract under consideration.
The website uses HTTPS to protect information in transit between your browser and the site. Strict Transport Security instructs supporting browsers to continue using secure connections. This reduces the risk of information being intercepted while travelling over a network.
Security headers restrict which resources the website can load, prevent other sites from embedding it in a frame and tell browsers not to guess a file’s content type. Camera, microphone and location access are disabled through the website’s permissions policy.
Enquiries are validated on the server, with limits on accepted fields and submission size. Origin checks and a hidden spam field help reject inappropriate requests. The website confirms success only after the enquiry service acknowledges saving the submission.
The website sends submissions to the Google Sheets enquiry service over HTTPS. Requests and save acknowledgements use a secret-backed signature to help verify their authenticity. That signing secret remains on the server and is not included in browser code.
Demo requests, team introductions and guide downloads are recorded in a private Google Sheets tracker for authorised New Dynamics operators. We ask visitors to keep confidential employee records, passwords and sensitive personal information out of free-text fields.
Optional analytics load only after a visitor accepts them. Rejecting analytics does not prevent an enquiry or guide download. Names, email addresses and form answers are excluded from the website’s analytics events, and preferences can be changed from the footer.
A sound security evaluation should cover the whole employee information lifecycle. Bring the following requirements into discovery so we can establish what applies to your proposed deployment and which supporting documents are available.
Define who needs access: employees, line managers, project leaders, HR and administrators. Discuss authentication, SSO, multi-factor authentication, provisioning and removal of access. For matrix teams, test who can see, contribute to and approve each part of a review.
Confirm the hosting provider, relevant service locations, encryption in transit and at rest, and responsibility for keys and secrets. Establish your residency requirements, including where backups, support access and any AI processing may take place.
Identify the data you intend to import, the purpose for using it and the appropriate retention period. Review export, correction, deletion and offboarding requirements. Align the configuration with your organisation’s policies and obligations.
Request the applicable approach to access logging, vulnerability management, security updates, backups and recovery. Agree the evidence, recovery expectations and incident communication arrangements needed for your organisation.
Review the relevant subprocessors and data processing terms before sharing employee information. Clarify controller and processor responsibilities, international transfers, support access and how changes to suppliers are communicated.
For any AI-assisted workflow, confirm what information is sent to which provider, how it is retained and whether it is used for model training. Define human review, permission boundaries and a route to correct inaccurate output before it influences a people decision.
Share your procurement questionnaire and the outcomes you need. We can discuss the scope of your assessment and identify the documentation to request. Confirm the applicable commitments in your agreement, including any controls that depend on your configuration or a third-party service.
Send your requirements or arrange a conversation with the team. Please start with a summary and leave sensitive records and credentials out of the message.
Arrange a security discussionEmail contact@new-dynamics.com with “Security report” in the subject, the affected page or service and a concise description. We can then agree how to exchange further details.
Please avoid accessing other people’s information, disrupting the service or including real employee data in a proof of concept. This contact route does not grant permission for intrusive testing.
Read our privacy noticeFor the controller and processor split, the data processing agreement, international transfers and the input you need for a DPIA, see our GDPR page.
No. We are working towards ISO 27001, SOC 2, ISO 42001 and ISO 27701, and all four are in progress rather than certified. Our certifications page sets out what each covers and what you can evaluate today.
The website controls described here apply to the public marketing site and its enquiry service. Request the security documentation that applies to your proposed performance management workspace, integrations and configuration.
Yes. Share your requirements with the team so the applicable controls, documentation and contractual commitments can be discussed as part of your evaluation.
Contact contact@new-dynamics.com. Our privacy notice explains website data collection, service providers, analytics choices and how to exercise your data protection rights, and our GDPR page sets out the controller and processor roles for a workspace.
Explore the review experience, then bring your access, data and governance requirements to a conversation with our team.
Try the interactive preview
