Security & Status

Trust, built into every interview.

First Round AI protects candidate data with enterprise-grade encryption, granular access controls, and real-time service monitoring. This page details our security posture and live system status.

Security posture

A defense-in-depth approach across infrastructure, application, and candidate data.

Encryption everywhere

TLS 1.2+ secures every request in transit. Candidate recordings, transcripts, and evaluation data are encrypted at rest with AES-256.

Granular access control

Role-based access (admin, employer, candidate) with row-level security. Employers only see candidates and interviews assigned to their company.

Candidate consent first

Every interview requires explicit recording and AI-evaluation consent. Single-use launch tokens expire automatically and can be revoked instantly.

Data minimization

We collect only what the interview requires. Resumes are screened for sensitive content before evaluation and retention is configurable per company.

Isolated infrastructure

Hosted on the Base44 cloud with per-tenant isolation. Secrets never reach the client and service-role operations are server-verified.

Audit & observability

API health, conversation outcomes, and administrative actions are logged continuously so incidents are detected and reviewed fast.

Compliance

SOC 2 Type II· In progress
GDPR· Aligned
CCPA· Aligned
HIPAA-ready· On request

System status

Checking live status…

Uptime — last 90 days

90 days ago99.98% uptimeToday

Incident history

A transparent record of service disruptions and resolutions.

No incidents in the last 90 days

When an incident occurs, we publish a timeline here with impact, resolution, and a post-mortem.

Get notified

Receive email updates when service status changes.

Subscribe to updates

Report a vulnerability

If you believe you have found a security issue, please report it responsibly. We investigate every report and respond within one business day.

security@firstroundai.com