Skip to content
EIP

Data security

Your data stays yours.

No system access. No integration. Names are replaced with codes before anyone analyzes anything, and everything is deleted on a schedule you know.

How your data moves

From your spreadsheet to deleted, in five steps.

  1. Step 1

    You choose what to share

    A spreadsheet of what you already track. No system access, no integration, no IT project.

  2. Step 2

    Names become codes

    No names, Social Security numbers, or addresses are needed. The score runs on coded employee records.

  3. Step 3

    Encrypted upload

    Your file goes through our secure portal. TLS 1.2 or higher in transit.

  4. Step 4

    Blind analysis

    The analysis runs on coded data. Our expert advisors see coded data only, and everyone is under a nondisclosure agreement.

  5. Step 5

    Deleted on schedule

    Kept for the length of the engagement plus 90 days, then deleted automatically or sooner on request.

What protects it

The facts, plainly.

  • Encryption

    TLS 1.2+ and AES-256

    In transit and at rest.

  • Secure upload

    No API needed

    A spreadsheet or an export from your HR system, through our secure portal.

  • Retention

    Engagement plus 90 days

    Then deleted automatically, or on request.

  • No PII required

    Coded records

    You control what we see.

  • Healthcare

    Business Associate Agreement

    Protected health information limited to what the model requires.

  • SOC 2 Type I

    In progress

    Targeting Q1 2027.

Who can see what

Access is narrow on purpose.

  • Expert advisors

    Coded data only

  • A small number of named EIP team members

    The link between a code and a person, under a nondisclosure agreement

  • Supervisors at your company

    Who to talk to and what to say, never scores

  • Third parties

    Nothing. We do not share client information.

AI and automated decisions

People decide. Our scoring is not AI.

  • The Flight Risk Score™ and Turn Tax™ models are built and maintained by our team as documented, weighted calculations. They do not use machine learning, generative AI, or third-party AI services, and they do not teach themselves. It starts from the same 19 base variables, and our team weights it for each company and adds variables where that company needs them. It gets more accurate as more data points are added.
  • Our tools help prioritize conversations. They do not make employment decisions. Clients make every decision about their people, and a score should never be the sole basis for any employment decision about an individual.
  • We do not enter client data into AI tools and do not use it to train AI models.
  • We use AI tools to help write software and to prepare marketing material and sample reports. Sample reports use fictional data.

Common questions

Questions about security.

Do you need access to our HR system?

No. You share what you are comfortable sharing, usually a spreadsheet of what you already track. We tell you what is useful, you decide what to send. No system access, no integration, no IT project. Your data is encrypted in transit and at rest, and deleted 90 days after the engagement ends. For healthcare clients, we work under a Business Associate Agreement.

How secure is the data?

You stay in control of what you share. For a pilot, you can send anonymized information with no names or IDs, and results come back by group. In a full engagement, your information is split so our analysis runs without names attached. Only three members of the EIP team can see the link between a code and a person, all under NDA. We do not share client information with third parties, and we delete everything 90 days after the engagement ends. For healthcare clients, we work under a Business Associate Agreement. SOC 2 Type I is in progress, targeting Q1 2027.

How long do you keep our data?

We keep data for the length of the engagement plus 90 days, then delete it automatically or on request.

Is EIP SOC 2 certified?

SOC 2 Type I is in progress, with a target of Q1 2027.

Does EIP use AI to score employees?

No. The Flight Risk Score™ and Turn Tax™ models are documented, weighted calculations built and maintained by our team. They do not use machine learning, generative AI, or third-party AI services, and they do not teach themselves. It starts from the same 19 base variables, and our team weights it for each company and adds variables where that company needs them. It gets more accurate as more data points are added. Our tools help prioritize conversations and never make employment decisions. Clients make every decision about their people.

How does EIP handle healthcare data?

For healthcare engagements, we work under a Business Associate Agreement and limit protected health information to what the diagnostic model requires.

Start with a conversation

Start small. See results in 7 days.

Send us 7 standard columns from your HR system, usually a few clicks to export, for a small group of your employees. No contract or commitment. If it does not surprise you, walk away.