Security, built into how we work.
How we protect client, candidate and employee information. Our practices are aligned with the SOC 2 Trust Services Criteria; we haven’t completed a SOC 2 audit yet, and we’ll say so here when we have.
What is in place today.
Each item below is built into our website and recruiting system and covered by automated tests.
Access
Only the people who need it.
- Role-based access with the least privilege each job needs
- Two-factor sign-in for administrators and HR
- Account lockout after repeated failed sign-ins
- Automatic sign-out after 30 minutes of inactivity
- Access reviewed and signed off every quarter
Data protection
Encrypted in transit and at rest.
- HTTPS everywhere, with HSTS
- Uploaded files encrypted with AES-256-GCM
- Uploads scanned for malware before anyone can open them
- Encrypted nightly backups, with regular restore checks
- Personal data deleted on a published schedule
Audit trail
Every change leaves a record.
- Access, document and hiring changes are logged
- The log can’t be edited or deleted
- Entries are sealed into a hash chain every hour, so tampering shows
Engineering
Checked before it ships.
- Every change goes through automated tests and dependency checks
- Dependencies pinned, and security advisories reviewed
- No third-party scripts, trackers or advertising tags on this site
- Strict content security policy and security headers
AI
People decide; AI assists.
- A person makes every hiring decision
- Text from applicants is treated as data, never as instructions to the AI
- AI features are off unless we switch them on, and applicants are told when they are used
Found a security issue?
Email info@aithicalhub.io with the subject “Security”. We acknowledge reports within three business days and keep you updated until it is fixed.
- Tell us what you found and how to reproduce it.
- Please don’t access, change or keep other people’s data, and give us reasonable time to fix the issue before sharing it.
- We won’t take legal action against good-faith research that follows these rules.
Frequently asked questions.
Still unsure? A 30-minute call with a tech lead answers the rest.
Ask us directlyAre you SOC 2 certified?
Not yet, and SOC 2 is never a certification: it is an audit report from an independent CPA firm. Our controls are designed against the SOC 2 Trust Services Criteria, and we are preparing for an audit. We will publish it here when we have a report.
Will you complete our security questionnaire?
Yes. Send it to info@aithicalhub.io and we will answer it, and share more detail under NDA where needed.
Where is my data stored?
On our own private server, not with advertising or analytics companies. Ask us for the details your review needs.
Do you use my data to train AI?
No. We don’t use your data to train AI models.
Let’s talk about your project.
Tell us about your team, your stack and the problem you want solved. We’ll come back with how we would approach it.
Response time
Within one business day
Prefer a call?
Headquarters
Charlotte, North Carolina
Thank you. Your message has reached our team.
A member of our team will reply, usually within one business day. Your reference is .