Form validation
Server-side validation and rate limiting, with optional bot protection. Delivery requires configured SMTP and owner recipients.
HIREVALID TRUST CENTRESpecific controls.
Ask a security questionSpecific controls.
Clear status.
Know what is implemented on this website, what belongs to the application and what still needs verification.
CONTROL REGISTER
Last documented: 2026-10-01Transparency you can inspect.
Implemented in the marketing website
Tracking consent
Optional analytics and marketing scripts are loaded according to consent.
Access & isolation
Organization-level authorization and restricted access to candidate results.
Retention & residency
Production storage regions, vendor choices and retention commitments require confirmation.
Independent certification
No SOC 2, ISO certification or completed independent penetration test is asserted.
ON THIS MARKETING WEBSITE
Practice stays practice.
Public sample tools do not activate a camera or send assessment answers to a hiring organization. Report previews use fictional candidates.
Your browserNo employer result submission
Local interactive samples
Documents & contact routes
Our policies explain data handling, customer responsibilities and the rights of candidates.
Access, protection and assurance details
Planned access and isolation
The product brief specifies organization-level access controls, database row-level security and server-side authorization. Candidate attempts are intended to use signed, single-use, expiring invitation links.
Those controls belong to the employer and candidate applications. This marketing website contains no real candidate results; all result previews are fictional.
Planned data protection
Encryption in transit, restricted storage access, signed file links and audit logs are planned. Sensitive images need shorter retention and automatic deletion appropriate to the finalized policy.
Production data residency and sub-processors have not been approved. The brief proposes an initial US region and a possible later EU option. Do not assume an EU residency commitment.
Security on this website
The website applies security headers, server-side form validation and consent-gated tracking. Contact delivery requires SMTP and owner recipient configuration. Both forms enforce consent, validation and rate limits; bot verification and shared rate limits are available when configured.
Interactive sample tools run in your browser. They do not activate a camera or submit assessment answers to a hiring organization.
What is not certified?
SOC 2 readiness is a later roadmap item. HireValid does not claim SOC 2 certification, ISO certification, an independent penetration test or completed regulatory approval.
Report a concern through the contact page using the security topic. Please avoid sending sensitive candidate data in an initial report.