Security and privacy

How Hirlo handles your data.

Hiring data is personal. This page says plainly what Hirlo does with it, who helps us process it, and what is still being built.

Your company’s data is separated

Every company’s jobs, candidates, recordings and reports are kept apart by database rules. A person at one company cannot read another company’s data.
Reviewers see only the jobs they are given. They cannot see other jobs, the team, billing or settings.
Owners and admins control who joins, and can remove anyone at any time.
Staff can sign in with a code from an authenticator app as well as a password, and owners can require it for everyone.
An activity log records who opened a candidate, played a recording, downloaded a transcript, decided or changed the team. Nobody can edit it.

Each interview link is a long private code that works for one candidate only. Links can expire.
Before a video interview the candidate confirms their email with a code and takes a check-in photo, so your team can see who sat the interview.
Hirlo does not identify or match faces, and does not read emotions.

Recordings, check-in photos and resumes are stored in private storage. Your team opens them through short-lived links.
You choose how long recordings are kept, from 7 days to a year. Recordings, photos and resumes past that period are deleted automatically every day.
Deleting a candidate or a job deletes their recordings, photos and resume with them.
Candidates can ask for a copy of their data or for its deletion. The company sees the request and answers it.

Hirlo scores answers and matches resumes to the role, and shows the evidence behind each result. Your team makes every hiring decision.
Nobody is rejected automatically. Applicants who are not shortlisted automatically wait for your team to decide.
Integrity signals, such as leaving the interview tab or looking away, are shown as context for a person to review, never as proof.
The AI is instructed never to ask about, or mark down for, protected characteristics, accent, grammar or writing style.

All traffic is encrypted in transit, and stored data is encrypted at rest by our hosting providers.
Secret keys stay on the server. Payment and email webhooks are checked with signatures before anything changes.
Company separation is tested automatically: two test companies and a reviewer try to read and change each other’s data, and every attempt must fail.
Public application links are rate limited and protected against bots. Sensitive settings, such as a company’s plan, can only be changed by the server.

SupabaseDatabase, sign-in and private file storageIreland (EU)

VercelHosting of the applicationIreland (EU)

OpenAIInterview questions, scoring, resume matching and summariesUnited States

ElevenLabsInterviewer voice and speech-to-textUnited States and EU

ResendEmail delivery (verification codes, invitations, digests)United States

BachsCard payments and billingUS dollars

A formal data processing agreement, privacy policy and terms of service, reviewed by a lawyer.
An independent security review.

Candidates can ask for a copy of their data, or its deletion, on the data request page.