Security you can verify, not just claims.
HireInterviewAI handles sensitive hiring evidence — transcripts, code, voice, recordings, and proctoring signals. Here is exactly how we protect it. We describe only measures we actually have in place.
Encryption
Data is protected both as it moves and where it lives.
- TLS encryption for all data in transit
- Encryption at rest for stored data and recordings
Infrastructure
Hosted on hardened, industry-standard cloud infrastructure.
- Application and data hosted on Google Cloud Platform
- Cloudflare edge for CDN, DNS, WAF, and TLS termination
Candidate & proctoring privacy
Sensitive interview evidence is scoped tightly and never sold.
- Transcripts, code, audio, recordings & proctoring signals scoped to the hiring org and candidate
- Candidate evidence is not used to train third-party foundation models
Access control & visibility
Organizations are isolated from each other's hiring data.
- Per-tenant isolation between organizations, with role-based access within each org
- Candidate fingerprints are visible to employers only when the candidate opts in to discoverability — default off
Sub-processors
A small, vetted set of providers, each used for one purpose.
- Anthropic (AI evaluation), AssemblyAI (speech-to-text)
- Google Cloud (hosting), Cloudflare (edge), Razorpay (payments)
Retention & deletion
Your data, your control — for organizations and candidates alike.
- Employer interview data retained for the org review window; deleted on the org’s instruction or a verified candidate request
- Self-assessment recordings retained for 18 months and candidate-deletable
- A candidate ’s knowledge fingerprint persists until they delete it or their account — then it’s purged and removed from search
Compliance posture
We build and operate with GDPR and India's DPDP Act in mind. Candidates have a right to access the evidence captured about them via a token-authenticated evidence link (DPDP §11 / GDPR Art. 15), and candidates with a marketplace account can export and delete their profile, assessments, and knowledge fingerprint self-serve from the candidate portal — no routing through a hiring organization; other data is deleted on verified request. We are honest about our maturity: we hold no formal third-party certifications (such as SOC 2 or ISO 27001) at this time, and we will say so plainly rather than imply otherwise.
Responsible disclosure
Found a vulnerability? We want to hear from you. Report it privately and give us a reasonable window to remediate before any public disclosure. We do not pursue good-faith researchers who follow this policy.
hireinterviewai@gmail.comWant to dig into the details?
Read how we handle data in our Privacy Policy, or book a demo and we’ll walk your security team through the architecture.