Security

How we protect your data

Encryption

All data is encrypted in transit with TLS 1.3 and at rest with AES-256.

Row-Level Security

Supabase RLS ensures every user can only access their own data at the database level.

No Resume Storage

Uploaded files are parsed in memory and discarded after analysis. We never store your original documents.

Secure Authentication

Passwords are hashed with bcrypt. Sessions are managed via secure, HttpOnly cookies with automatic refresh.

Audit Logging

All API requests are logged for security monitoring. Suspicious activity triggers automatic alerts.

Infrastructure

Deployed on Vercel's edge network with automatic DDoS protection, CDN caching, and zero-downtime deployments.

Report a Vulnerability

If you discover a security vulnerability, please report it responsibly by emailing support@recruiterlens.com. We take all reports seriously and will respond within 48 hours.