Security you can build a business on
Candidate data is sensitive. Talent Draft Pro is built with security fundamentals from the ground up — here's exactly how we protect your workspace.
Passwordless sign-in
Email one-time codes — no passwords to phish, reuse, or leak.
Short-lived sessions
Access tokens live in HttpOnly, Secure cookies with rotating refresh tokens and reuse detection, plus idle sign-out.
Per-organization data isolation
Every record is scoped to your org; cross-org access is impossible by design.
Edge protection
A managed Web Application Firewall (AWS managed rule sets) plus per-IP rate limiting sits in front of the API.
Encryption
Data is encrypted at rest — including candidate data and résumés — and in transit (HTTPS everywhere).
Least-privilege access
Scoped IAM roles throughout, with deliverability protected via bounce and complaint handling.
We'll add formal compliance attestations (SOC 2, GDPR/CCPA) as we complete them — and we won't claim them before then.