Applicant data for fire, EMS and law enforcement, protected like it’s ours.
Recruits for a police department, an EMS agency or a volunteer fire company trust you with personal details. Here is how every record is isolated, encrypted and kept out of the wrong hands.
FIFTEEN PROTECTIONS
How we protect applicant data
Isolated per agency
Row-level security separates each agency’s data at the database level.
Encrypted in transit and at rest
Every connection uses HTTPS and all stored data is encrypted. Applicant personal details and messages are also encrypted field by field, with keys managed in AWS KMS.
Only staff you authorize
Access is limited to the team members you choose, with a full audit trail of who viewed, changed or exported a record.
Secure staff sign-in
Two-factor authentication, passwordless email sign-in, and passkeys with Face ID, Touch ID or Windows Hello. Agencies can use their own single sign-on.
Secure document handling
Uploads are checked for file type and scanned for malware, then kept in private storage that opens only through short-lived links.
No account needed for applicants
Each applicant gets a private link, and a one-time code sent to their email confirms every new device or session. No passwords to create, forget or leak.
We only ask for what you need
No Social Security numbers, no medical history.
Backups and recovery
Continuous backups with point-in-time recovery for 14 days.
Watched around the clock
24/7 uptime monitoring with on-call alerts, error tracking and DDoS protection.
Continuously checked code
Automated security scanning and dependency updates on every change.
Privacy built in
Cookie choices and Global Privacy Control are honored, and personal data is kept out of system logs.
Hosted on SOC 2 Type II infrastructure
Our hosting and database providers are independently audited.
US-hosted data
Your data is stored in the United States.
Your data is yours
Export all of your agency’s data at any time.
Documentation on request
A security whitepaper and a data processing agreement for your procurement team.
WHAT WE DON’T DO
The safest data is the data we never hold.
That includes background checks: we never hold background-check data. If your pipeline needs the status, we can connect with your background check provider. Contact us for more information.
No Social Security numbers
We never ask for them.
No medical history
Not collected, not stored.
No personal data in logs
System logs stay free of applicant details.
No passwords for applicants
Applicants use their own secure link, confirmed by a one-time emailed code on each new device, instead of an account.
FOR YOUR CITY ATTORNEY
The questions procurement asks first.
Can the sheriff’s office and the fire district share one platform?
Yes, without seeing each other’s applicants: row-level security separates every agency’s data at the database level.
What if a staff login is phished?
Staff use two-factor authentication or passkeys with Face ID, Touch ID or Windows Hello, so there is nothing to steal or reuse.
What happens to an uploaded résumé?
Uploads are verified and scanned, then kept in private storage that opens only through short-lived links.
Where is our data hosted, and can we take it with us?
In the United States, on providers independently audited to SOC 2 Type II, and you can export your data any time.
Can you give our procurement team paperwork?
Yes. A security whitepaper and a data processing agreement are available on request.
SECURITY & TRUST
How we protect your site, your applicants and your members.
Agency information, member data and applicant information are protected across our platforms. See the full Security & Trust statement.
Security documentation on request
A security whitepaper and a data processing agreement for your procurement team.
Request the whitepaper