Built for HR. Built for Trust.

All data transmitted between your browser and our servers uses TLS 1.3 encryption. Connections are rejected if they do not meet this standard.

Uploaded files (including CV documents) are encrypted at rest using AES-256. Encryption keys are stored separately from the data they protect.

Your Recall memory — the professional context stored across tools — is encrypted per-user with a unique key. No other user can access your stored memory.

Every database query is scoped to your account. Multi-tenancy isolation is enforced at the data layer — not just the application layer.

All administrative actions are logged with timestamp, actor and change summary, and are monitored for anomalies. If you delete your account, your data and its audit rows are deleted with it — except transaction records, which accounting law requires us to keep, stripped of any link to you.

API endpoints are rate-limited per user and per IP to prevent abuse and protect service availability for all users.

Tool inputs sent to our AI sub-processor are processed solely to generate your response, under that provider's commercial API terms. They are never used to train AI models, and our sub-processor does not retain them beyond the API request. Your own copy stays in your account until you delete it.

Nothing you create is deleted on a timer. Your content lives as long as your account does, and cancelling a subscription deletes nothing. The only automatic deletion is for accounts left unused for 24 months — warned by email at 90, 30 and 7 days, and cancelled entirely by any sign-in.