Security
How we protect your data and your candidates' information.
Our Commitment
Security is foundational to Agent Recruiters. We handle sensitive recruiting data — candidate profiles, contact information, and hiring decisions — and we take that responsibility seriously.
Infrastructure
- Hosting: All data is hosted on SOC 2 Type II certified infrastructure with data centers in the United States
- Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
- Backups: Automated daily backups with point-in-time recovery
- Network: DDoS protection, Web Application Firewall, and intrusion detection
Application Security
- Role-based access control (RBAC) for all user accounts
- Row-level security on all database tables
- API authentication via secure tokens with automatic expiration
- Input validation and parameterized queries to prevent injection attacks
- Regular dependency scanning and security audits
Data Privacy
- Candidate data is isolated per customer — no cross-tenant data access
- We source only from publicly available professional profiles
- Automatic data retention policies with configurable deletion timelines
- Right to deletion honored within 30 days
Compliance
- GDPR compliant (see our GDPR page for details)
- CCPA compliant
- SOC 2 Type II audit in progress
Responsible Disclosure
If you discover a security vulnerability, please report it to [email protected]. We appreciate responsible disclosure and will acknowledge reports within 24 hours.