Security & trust

Candidate data is a responsibility

Interviews are personal. Here's how we protect them — technically and ethically.

Encrypted everywhere

TLS 1.2+ in transit, AES-256 at rest — recordings, transcripts and CVs alike.

Access control

SSO/SAML, role-based permissions, and audit logs for every view and export.

Data residency

Choose where interview data lives — KSA, UAE or EU regions.

Candidate consent

Candidates see what's recorded and why before the first question — no dark patterns.

Retention you control

Set auto-delete windows per screening; deletion requests honored within 30 days.

Ethical integrity checks

Risk flags are explained evidence for humans — never silent auto-rejections.

Where we are

Our security roadmap

We'd rather tell you exactly where we are than show badges we haven't earned yet.

Live today

Core controls

Encryption in transit and at rest, role-based access with audit logs, candidate consent flows, and configurable retention.

Live today

Privacy alignment

Practices built around Saudi PDPL and GDPR principles — consent, data minimization, and the right to deletion.

In progress

Independent audits

Third-party penetration testing and SOC 2 Type II preparation are underway with an external auditor.

Data flow

Where candidate data goes

From interview to deletion — four stops, no detours.

01

Interview happens

The candidate consents on-screen, then records. Everything travels encrypted over TLS.

02

Stored encrypted

Recordings, transcripts and CVs sit AES-256-encrypted in the region you chose — KSA, UAE or EU.

03

Your team reviews

Only roles you authorize see scores and recordings — and every view lands in the audit log.

04

Deleted on schedule

At your retention window — or on request — data leaves production, then backups within 30 days.

Plain-language promises

  • Your data works only for you — never for anything else.
  • Candidates stay in control — they can request a copy or deletion of their data at any time.
  • Every score is auditable — each AI score links to the answer that produced it, reviewable by your team.
FAQ

Common questions

Where is candidate data stored?

In the region you choose at setup — Saudi Arabia, UAE or the EU. It stays there; nothing moves without your say-so.

Who can see interview recordings?

Only members of your team with roles you've authorized — and every view is written to the audit log. Our staff access recordings only with your explicit permission, for support.

Can candidates have their data deleted?

Yes. Candidates can request a copy or deletion of their data at any time, and employers can set auto-delete windows per screening. Requests are honored within 30 days.

What happens to our data if we cancel?

You export everything first. We then delete your data from production within 30 days of account closure, and from backups within a further 30.

Have a security questionnaire?

Send it over — we'll return it completed within a week.

Contact the security team