Security Policy

1. Our Commitment

AuraHireAI takes the security of your data seriously. We employ industry-standard security practices to ensure that your personal information and resume data are protected.

2. Infrastructure Security

Our platform runs on Google Cloud Platform (GCP) and Supabase, utilizing their world-class security infrastructure.

• Encryption in Transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2+.
• Encryption at Rest: Data stored in our databases is encrypted at rest using AES-256 encryption.

3. Access Control

We enforce strict Role-Based Access Control (RBAC) within our application.

• Candidates can only access their own data.
• Recruiters can only access candidates who have matched with their listings or are publicly visible.
• Internal access to production data is restricted to authorized personnel.

4. Incident Reporting

If you believe you have found a security vulnerability in AuraHireAI, please contact us immediately at security@aurahire.ai. We appreciate your help in disclosing the issue to us responsibly.