Purpose limitation, consent and notice, least-data collection, retention review, and access, correction and deletion workflows.
Every record belongs to one organization. Queries are scoped by organization and the database refuses cross-organization links.
Resumes and attachments live in private object storage and are served through short-lived signed links.
AI drafts, searches and flags. Authorized people approve consequential actions. We never score personality, emotion, accent or appearance.
Sensitive actions are recorded in an append-only audit log visible to organization administrators.
Passwords are stored as salted hashes, sign-in attempts are rate limited, and sessions expire when idle or after a password change.
All traffic is HTTPS, forms are CSRF protected, and a strict content-security policy blocks injected scripts.
This page describes product design intent and is not legal advice. Jurisdiction rule packs are activated only after review.