Enterprise-Grade Security & Data Sovereignty
Designed from day one to protect candidate privacy, ensure tenant data isolation, and comply with strict European GDPR regulations.
Cryptographic PostgreSQL Row-Level Security (RLS)
Strict multi-tenant boundary at the Postgres engine layer
Every tenant query enforces PostgreSQL Row-Level Security with security definer functions (public.get_current_user_org_id()). Tenant A can never query, read, or mutate Tenant B records, even in the event of an application-level bug.
- Mandatory organization_id foreign key on every tenant table
- Security Definer functions verifying auth.uid() against authenticated profiles
- Zero cross-tenant bleed guarantee backed by immutable RLS policies
Zero-Knowledge Cryptographic Candidate Tokens
48-character hex tokens with timing-safe validation
Candidates access their interviews and forms via high-entropy single-use cryptographic tokens. All token comparisons are executed using crypto.timingSafeEqual to prevent side-channel timing attacks.
- Cryptographically secure 48-character hex string generation
- Timing-safe constant time comparison preventing side-channel leaks
- Edge rejection for malformed or expired guest sessions
Private Storage with 15-Minute Signed URLs
Candidate recordings and resumes are never publicly addressable
All WebRTC video recordings and candidate resumes reside inside private, non-public storage buckets. File access is strictly brokered through short-lived (15-minute TTL) cryptographic signed URLs generated on-demand by authorized reviewers.
- Private buckets candidate-documents and interview-recordings
- Strict 15-minute expiration time-to-live (TTL)
- Binary magic bytes verification on file upload (prevention of executable spoofing)
GDPR Right to be Forgotten & Automated Purging
Automated video lifecycle deletion & 1-click candidate PII purge
Comply effortlessly with GDPR, CCPA, and CPRA. Organizations configure retention windows (e.g. 30, 60, 90, 180 days) after which candidate videos are permanently expunged. Candidate deletion requests trigger an irreversible atomic PII purge.
- Candidate Right to be Forgotten (Article 17 GDPR compliance)
- Configurable automated data retention schedules
- Immutable audit event ledger recording all purge operations
Disclosed Integrity Checks (Zero Invasive Spyware)
Transparent browser sensor APIs without creepy spyware
We believe candidate trust is paramount. HireZeo transparently alerts candidates to fullscreen mode and logs tab switches using standard browser Page Visibility APIs. We never install background system daemons, keyloggers, or pseudo-scientific biometric facial analysis.
- Transparent candidate disclosures before test commencement
- Zero system software or invasive background extensions
- No discriminatory AI facial or voice sentiment scoring
Infrastructure Encryption & Uptime SLA
TLS 1.3 in transit, AES-256 at rest, 99.99% uptime
All network communication is enforced over modern TLS 1.3. Databases and object storage are encrypted at rest with hardware-backed AES-256. Multi-zone redundant failover guarantees high enterprise availability.
- TLS 1.3 with strict HTTP Strict Transport Security (HSTS)
- AES-256 hardware encryption for data at rest and database backups
- Financially backed 99.99% service availability SLA for Enterprise plans
Need a Formal Security Assessment?
We provide enterprise procurement teams with complete SOC2 Type II reports, penetration testing summaries, architecture diagrams, and custom Data Processing Agreements (DPA).
Ready to Cut Preliminary Screening Time by 84%?
Join 500+ innovative talent teams screening candidates faster with asynchronous video interviews, custom candidate forms, and automated cohort exams.