Security and privacy
How Autessa Recruit protects candidate data
Autessa Recruit limits who sees candidate data by role, keeps candidate links private, holds anything that didn’t come through your careers site, and lets you honor do-not-contact and deletion requests.
Hiring managers see their own jobs. Interviewers see the interviews they are on.
Access
Who can see what?
Every role is narrowed to the person’s own work. The console only shows the screens a role may open.
| Role | Sees | Can do |
|---|---|---|
| Admin | Everything | Team, workspace settings, Setup, permanent deletion, plus everything a recruiter can do |
| Recruiter | Every job, applicant and interview | Approve and publish jobs, bulk actions, email templates |
| Hiring manager | Their own jobs and applicants, AI assessments and scorecards | Write and submit jobs, move applicants, schedule, decide |
| Interviewer | The interviews they are on and those candidates | Fill in their own scorecard and notes; never sees AI scores |
Data handling
Built-in protections
Private candidate links
Status and booking links are unguessable, tied to one application, stored only as a hash (newest three kept) and removed from the address bar after opening. Lost links are re-sent only to the email that applied.
Held intake
Applications are signed by your careers site. Anything that didn’t arrive through it is held for review and never assessed.
Spam and abuse protection
The application form has a hidden spam trap, limits repeated applications in a day, and checks resume type and size (up to 10 MB).
Resume privacy
Uploaded resumes are stored under a generic file name, so a candidate’s original file name never leaves their browser.
Prompt-injection flags
If a resume contains instructions aimed at the AI, the assessment flags them for a person to review.
Narrow, sealed keys
The careers site uses two narrow keys, one for resume uploads and one for your logo, each stored in a sealed secret nobody can view, and rotated without downtime.
Personal connections stay personal
Each person’s mailbox and calendar connection is used only for their own sends and invites, and never shown to anyone else.
Shared inbox privacy
Team inbox subjects and participants are stored encrypted; replies always leave from the shared address.
Do not contact
One switch stops all contact with a person, manual and automatic: every email, and every agent call or message.
Full activity record
Every job transition, stage move, email, note, assessment and booking is written to the activity timeline, and every email is logged with private links redacted.
Fair hiring
AI as advice, people as deciders
Recruit’s AI never moves an application. Interviewers never see its score, scorecards stay blind until each person submits, and admins write guidance about how to judge, not who to prefer.
- ✓AI scores are advisory and hidden from interviewers
- ✓Blind scorecards
- ✓Company-wide grading guidance
- ✓Report: AI score band against real outcomes
Strong backend and data depth with payments experience; light on container orchestration.
Strengths
Gaps
The score is advice from an AI reading the resume and answers. It never moves an application by itself.
Trust Center
Autessa’s security program, in one place
Certifications, policies and security documents for the Autessa platform that Recruit runs on are in the Autessa Trust Center.
FAQ
Security questions
Who can see candidate data in Autessa Recruit?
+
Only people on the Recruit team, by role. Admins and recruiters see every applicant; hiring managers see applicants for their own jobs; interviewers see only the candidates they are interviewing, without AI scores.
Are candidate status links private?
+
Yes. Each status link is unguessable and works for one application. Recruit stores only a hash of it, keeps the newest three, and the careers site removes it from the address bar after opening.
Can we delete a candidate’s data?
+
Yes. An admin can delete a candidate permanently, removing their applications, assessments, interviews, scorecards, emails, notifications and activity. Stored resume files are handled separately; ask your Autessa admin.
Where are Autessa’s certifications and security documents?
+
Autessa’s security program, certifications and documents are published in the Autessa Trust Center at trust.autessa.com.
Hire with confidence
Roles, private links and held intake are on from day one. Nothing to configure before your first job.
Ready out of the box · sample data to try every screen · remove it in one click
100% customizable, code and all
Make Autessa Recruit fully your own.
Use it out of the box, then change anything. Ask Autobot, Autessa’s AI builder, for a new field, screen, report, workflow or agent and it builds it into your copy of the app. Or open the code and edit it yourself. Nothing is locked: the app, its data and its code are yours.
Start free and make it yours