Security & trust

Sensitive hiring data, treated as sensitive.

Resumes, recordings, transcripts, and evaluations are protected with private storage, role-based access, consent records, and audit logs. Supabase RLS and server-side domain ACLs are the foundation.

• Private Supabase Storage with signed URLs — no permanent public links for private docs.
• Service-role keys never ship to the browser.
• Candidate consent is explicit, revocable, and scoped.
• We do not infer protected attributes or score emotion/appearance from AV.

Questions about privacy or data use? See Privacy and Security.