Business Continuity & Disaster Recovery Policy

This policy sets out how RD1 plans to maintain and recover its critical recruitment services — including candidate and client data systems, the CallPilot AI screening platform, and payroll continuity for placed workers — in the event of a significant disruption.

IT and systems failure or cyber incident (RD1 holds Cyber Essentials certification, No. 4686a995, as part of its baseline cyber resilience); loss of access to premises (fire, flood, utility failure); loss of key personnel; and supplier or third-party platform outage (including client-facing ATS/CRM and CallPilot infrastructure).

• Data and systems: candidate, client, and worker data is held in cloud-based systems with vendor-managed backup and redundancy, reducing reliance on any single physical location.
• Remote working: RD1's core recruitment functions (candidate sourcing, client liaison, payroll administration) can be carried out remotely, allowing continued service if the Linlithgow office is unavailable.
• Key contacts: an up-to-date list of essential supplier, client, and payroll contacts is maintained separately from primary systems.
• Communication: in a disruption affecting service, RD1 will notify affected clients and workers as soon as practicable with an expected timeline for resumption.

On identifying a significant incident, a Director will assess impact and priority (payroll continuity for placed workers is treated as the highest priority, given its impact on individuals' income), stand up whatever remote or alternative working arrangement is needed, and communicate with affected parties.

This policy, and the practical arrangements behind it, is reviewed at least annually and after any incident that tests it in practice.

The Directors are responsible for maintaining and invoking this policy.