Security & Legal — also see DPA, Subprocessors, Cookie Policy, Professional Services Terms.
Measures we publish only when true
- TLS in transit
- Encryption at rest — [CONFIRM_AT_REST]
- Password hashing
- Tenant isolation controls
- Role-based access
- Backups — [CONFIRM_BACKUP]
- Logging and vulnerability management
- Incident response process
- Stripe-hosted payment entry
- Secure secret storage
- Deletion process described in Privacy Policy
We do not claim “bank-level,” “military-grade,” “100% secure,” or certifications (HIPAA, SOC 2, PCI, ISO) unless verified documentation is linked here.
This document is a product legal framework for HireLatch. It is not a substitute for advice from a licensed attorney. Placeholders in brackets must be confirmed before public advertising.