Principles you can point at.
Human-in-control AI, strict tenant isolation, and candidate rights, enforced in the database, not just the docs.
Eight commitments, one workspace.
These aren't marketing lines, each maps to a control you can inspect in the product.
Every organization's data is strictly isolated at the database level via Row-Level Security.
Files live in private buckets, accessed only via short-lived signed URLs.
AI recommendations are never final. Humans control shortlists, offers and rejections.
Every recommendation cites the evidence and confidence it is based on.
Candidates can request correction or human review of any AI output.
Professional verification is consent-controlled and disclosed to candidates.
We never infer protected characteristics from CVs, interviews or facial analysis.
Every candidate access, decision, override and export is written to an append-only audit log.
Isolation, enforced in the database.
Every table carries an org_id. Row-Level Security lives in the database itself, not the API layer, so a bug in application code cannot cross-contaminate tenants.
Files never live on public URLs. Every download is a short-lived signed URL scoped to the requesting user, the org they belong to, and the file they're allowed to see.
Rights, wired into the product.
Not a legal page, actual buttons candidates can press.
Before any processing begins, candidates see and agree to what's collected and why.
Every AI output cites the source in the CV, transcript, or work sample.
Candidates can request correction of any parsed field or AI-generated summary.
One click escalates any decision to a named human reviewer with a full transcript.
What we guarantee, in numbers.
Read it, then test it.
Book a security walkthrough with a human, we'll open the policies, the audit log, and the RLS rules with you.
