Creating, editing, exporting and erasing candidates, moving them through the pipeline, submitting them to clients and running AI interviews are logged with a timestamp and actor, visible in the Compliance module. Routine page views are not logged.
All AI calls route through a server-side proxy — your API keys and candidate data never touch client-side code.
Admins, recruiters, clients, and candidates each see only what their role permits — enforced on the server, not just hidden in the interface.
Consent is recorded per candidate. Agencies can download a candidate's full record and erase it, and profiles are purged on a retention schedule. See the Privacy Policy.
Work visas, certifications, and contractor documents are flagged automatically before they lapse.
Client portals never expose your internal scoring — only the simplified match tier they need to decide.