Security
Last updated: September 27, 2026
Security is foundational to HireFlow. Here's how we protect your data and the talent records you trust us with.
Encryption
TLS 1.2+ in transit; AES-256 at rest.
Access control
Role-based permissions, least-privilege.
Infrastructure
Cloud-hosted with automated backups.
Compliance
GDPR & CCPA aligned; annual audits.
Monitoring
24/7 anomaly detection & alerting.
Resilience
Redundant regions, 99.9% target.
Data protection
All data is encrypted in transit using TLS 1.2 or higher and at rest using AES-256. Backups are encrypted and tested regularly. Data residency options are available for Enterprise customers.
Access & authentication
Access to production systems is restricted by role and requires multi-factor authentication. We follow least-privilege principles and review access quarterly.
Vulnerability management
We run continuous dependency scanning, periodic penetration tests, and a responsible disclosure program. Report issues to security@hireflow.app.
Incident response
We maintain a documented incident response plan. Affected customers are notified without undue delay for any confirmed security incident.