Security & privacy
One company, one database. No exceptions.
Talvenue is architected so that one company’s candidates can never appear in another’s. Here’s how the platform protects your data, in plain terms.
Architecture
Each company runs as its own instance with its own database, file storage, domain and settings. Nothing is shared between companies at runtime.
Controls
How we protect accounts and data.
Passwordless sign-in
Staff and candidates sign in with single-use email links. Staff can also use Google sign-in. Staff and candidate accounts are entirely separate.
Only hashes of tokens
Sign-in links, sessions, preview links and calendar feed tokens are stored only as SHA-256 hashes.
Permissions on every request
Roles and job-level access are checked on the server for every request, and in the API on behalf of a named user.
Audit log
Changes are recorded with who made them and when, including API requests and AI usage.
Encrypted integration secrets
Webhook secrets, Slack URLs and calendar OAuth tokens are sealed at rest with AES-GCM encryption, using a key kept as a platform secret outside the database.
Deletion and retention
Candidates can request deletion and export of their data. Retention rules and legal holds are built in.
Hardened web layer
A strict Content Security Policy with no inline scripts, HSTS, secure host-only cookies, CSRF protection and same-origin checks.
Careful with sensitive data
EEO answers appear only in aggregate reports. Uploaded files are served with a sandboxing policy.
Abuse protection
Public forms use per-visitor rate limits with hashed IP addresses, honeypots and optional Cloudflare Turnstile.
Questions
Security questions, answered.
Is our candidate data ever stored with another company’s?
No. Each company has its own database and file storage. There is no shared candidate table to query across companies.
Where does Talvenue run?
On Cloudflare’s developer platform: Workers for the application, D1 for each company’s database and R2 for each company’s files.
Does AI see our candidates’ personal details?
AI features are off until you turn them on. When they’re on, names, contact details, links and addresses are removed from candidate text before it’s sent, and EEO answers, accommodations, work authorization and location are never read. More on AI.
Can we get a security review?
Yes. Request a demo and tell us what your security review needs; we’ll walk you through the architecture in detail.
Early access
Talk to us about your security requirements.
Tell us how your team hires today. We’ll walk you through the product and set up a careers site and workspace that are yours alone.