Security & Legal — also see DPA, Subprocessors, Cookie Policy, Professional Services Terms.
Measures we publish only when true
- HTTPS/TLS encryption in transit
- Sensitive resume tokens are hashed at rest; backup archives are AES-encrypted
- Password hashing
- Tenant isolation controls
- Role-based access
- Daily encrypted database and file backups with retention and recovery procedures
- Logging and vulnerability management
- Incident response process
- Stripe-hosted payment entry
- Secure secret storage
- Deletion process described in Privacy Policy
We do not claim “bank-level,” “military-grade,” “100% secure,” or certifications (HIPAA, SOC 2, PCI, ISO) unless verified documentation is linked here.
This document is a product legal framework for HireLatch. It is not a substitute for advice from a licensed attorney. This overview describes current product practices and may be updated as the product evolves.