Multi-tenant isolation
Company-scoped data in PostgreSQL with role-based access for admin, recruiter, and interviewer personas.
Security built for hiring data
Candidates share resumes, video, and code — treat that like sensitive PII. HireOnto combines AI automation with controls enterprise teams expect.
Controls
What we implement today
Auth & session hygiene
Short-lived access tokens, refresh rotation for staff, and separate candidate interview tokens.
Interview integrity
Proctoring events, media chunk uploads with presigned URLs, and reviewer timelines for defensible decisions.
AI guardrails
Structured interview plans, internal service auth between API and AI workers, and human override paths.
Demo & lead protection
Business-email-only forms with OTP verification, rate limits, and honeypots to reduce spam and scraping.
Data lifecycle
Retention jobs, candidate export/delete endpoints, and audit trails for compliance reviews.