Encryption at rest & in transit
LiveAES-256 at rest (Postgres, Redis, blob storage). TLS 1.3 in transit. Field-level encryption for PII via src/lib/field-encrypt.ts.
Loading…
Loading…
Security & trust
HireSignal handles the most sensitive data a hiring team has: résumés, interview transcripts, and decisions. We build security like that's the case.
AES-256 at rest (Postgres, Redis, blob storage). TLS 1.3 in transit. Field-level encryption for PII via src/lib/field-encrypt.ts.
Clerk SSO with SAML for Teams+ tiers. Role-based permissions audited via src/lib/team-audit.ts. All admin actions logged to audit-log.
Per-tenant Redis namespaces and row-level Postgres policies (db/migrations/001_rls_policies.sql). Workers run in segregated queues.
EU candidates routed to EU data centers per src/lib/regions/eu-residency.ts. US/EU split available on Enterprise.
Audit period opened Q2 2026 (Vanta). Type II attestation expected end of Q3 2026. Letter available under NDA today.
Annual independent audit of the automated decision tool. Results published publicly.
Available under NDA. Reply to your security questionnaire with this page and we'll attach the letter the same business day.