Protection by design
Security Posture
Layered safeguards across identity, infrastructure, interview delivery, and candidate information.
Encryption everywhere
TLS 1.2+ protects requests in transit, while candidate recordings, transcripts, and evaluations remain encrypted at rest.
Granular access control
Role-based permissions and row-level controls keep each company’s candidates, interviews, and results isolated.
Candidate consent first
Recording and AI-evaluation consent is captured before an interview. Single-use launch access expires and can be revoked.
Data minimization
Only information needed for the interview is collected, with configurable retention and controlled resume processing.
Isolated infrastructure
Tenant-aware application services separate workspace records, while credentials and privileged operations stay server-side.
Audit and observability
Health checks, conversation outcomes, and administrative actions provide a reviewable operational trail.
Assurance program
Compliance attestations
A clear view of our current alignment and the controls available for regulated teams.
SOC 2 Type II
In progressControl documentation, evidence collection, and independent audit readiness are underway.
GDPR
AlignedData minimization, access, deletion, and portability practices support applicable GDPR obligations.
CCPA
AlignedCalifornia privacy requests, disclosure controls, and deletion workflows are supported.
HIPAA-ready
On requestAdditional safeguards and contractual review are available for eligible enterprise use cases.
Live health
System Status
Checking live status…
Connecting to live health services.
Rolling window
Service availability
99.98% uptime
Operational record
Incident History
A transparent record of service disruptions, customer impact, resolutions, and follow-up actions.
No incidents in the last 90 days
When an incident occurs, we publish its timeline, affected services, resolution, and post-incident review here.
Status notifications
Get notified
Receive email updates when service status changes or an incident is resolved.
Subscribe to updatesSecurity reporting
Responsible disclosure
Report a suspected security issue privately. We investigate every report and aim to respond within one business day.
security@firstroundai.com