Security & trust

Candidate data deserves careful handling.

We design for workspace isolation, access controls, and operational accountability — without claiming certifications we have not verified.

Data protection practices

·Tenant-scoped workspaces so agency data stays separated
·Encrypted connections for data in transit (TLS)
·Designed to support secure storage of candidate profiles
·Regular review of access and operational practices

Access controls

·Role-based access for owners, admins, recruiters, and viewers
·Principle of least privilege for internal operations
·Authentication required for workspace access
·Admin actions designed to be auditable

Operational accountability

·Activity logging for screening and profile changes
·Human review before client-facing submissions
·Support access gated behind formal approval when needed
·Responsible disclosure channel for security reports

Privacy alignment

·Designed to support responsible handling of candidate data
·Data processing practices described in our Privacy Policy
·Contact us for data protection questions or DPA requests
·AI outputs are recommendations — hiring decisions stay with humans

Where is candidate data stored?

Data is stored on infrastructure we operate for the platform. Contact us for current hosting region details and data residency questions.

Can SRP staff access my candidate data?

Support access is limited and gated. We do not routinely browse customer candidate data without a documented support request and approval.

How does AI fit into compliance conversations?

Our AI assists recruiters with screening and explanations. Final hiring and submission decisions remain with your team, with human review built into the workflow.

How do I report a security concern?

Email security@srpailabs.com with details. We acknowledge reports promptly and investigate validated findings.

Report a vulnerability: security@srpailabs.com

Questions about data handling?

Our team can walk through access controls and human review workflows.