Encryption everywhere
TLS 1.3 in transit, AES-256 at rest. All connections to our APIs are HSTS-protected.
Hardened infrastructure
Hosted on tier-1 cloud providers with isolated environments, automated patching, and least-privilege IAM.
Auth done right
Email magic links, OAuth, optional SSO on Career+. Passwords are hashed with argon2id.
Zero training on your data
We never share your résumé or generated content with model providers for training. Inference only.
SOC2-aligned controls
Documented incident response, change-management, vendor review, and quarterly access audits.
GDPR & data rights
Export your data anytime. Delete your account with one click — wipes within 30 days.
Responsible disclosure
Found a vulnerability? Email security@hirestack.tech with reproduction steps. We respond within 48 hours and credit researchers in our hall of fame.