Security practices

We handle sensitive voice and hiring data. This page describes controls that exist today — not certifications we have not earned.

What we implement today

Per our privacy policy: encryption in transit, access controls, and least-privilege internal access to production systems. Session artefacts include voice audio, transcripts, and derived scores.

This page is product and policy information, not legal advice. Consult qualified counsel for your jurisdiction and use case.

Encryption in transit for web and API traffic
Role-based internal access to production data
Deletion controls for sessions and account history where available in product

What we do not claim

Intervues does not hold SOC 2 Type II, ISO 27001, or similar certifications today. Formal third-party security audits are on the roadmap for enterprise GA — we will publish reports when they exist, not before.

Candidate and hiring data

We do not sell session data, share it with advertisers, or train unrelated third-party models on your voice or transcripts. Delete a session or full history when controls are available, or write to admin@intervues.club.

Report a concern

Security questions or responsible disclosure: admin@intervues.club.

Questions

Frequently asked

Do you have SOC 2?

No — not today. We describe actual controls on this page and in our privacy policy rather than implying a certification we have not completed.

Where is data stored?

On infrastructure we control, with subprocessors for speech recognition and language models under contractual terms. See [sub-processors](/sub-processors) for the current list posture.

Related: Pricing · Interview engine · Hiring teams

Start practising →