Security & Trust Principles
How HyperResume safeguards candidate career records, privacy, and system integrity.
End-to-End Encryption
All network communications are enforced over TLS 1.3. Databases and object storage employ AES-256 encryption at rest.
Multi-Tenant Data Isolation
Every database query enforces strict tenant scoping. A valid UUID alone never confers resource access without matched ownership credentials.
Untrusted Input Sanitization
Uploaded resumes and job descriptions are strictly isolated and treated as untrusted data. Prompt-injection attempts cannot alter model instructions.
Zero Credential Exposure
API keys, hashed passwords, and payment secrets are strictly redacted in application logs and isolated from client-side bundles.