Infrastructure
- Application hosted on Railway (AWS-backed infrastructure)
- Database, authentication, and file storage on Supabase (SOC2 Type II certified, AES-256 encryption at rest)
- Email processing via Postmark (SOC2 Type II certified)
- Payment processing via Stripe (SOC2 Type II + PCI DSS Level 1 — card data never touches HireForm systems)
Data handling
- Resume text is processed by Anthropic's Claude API and not stored by HireForm. Anthropic deletes API data per their retention policy and is SOC2 Type II certified.
- Formatted output files are delivered by email and not retained by HireForm servers.
- All data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
Access controls
- Multi-factor authentication enforced on all production systems.
- Sender domain allowlisting prevents unauthorized use of client accounts.
- Row-level security in the database ensures one client's data is never accessible to another.
Compliance
- HireForm is operated by HireForm LLC, a New Jersey LLC, and complies with applicable US federal and state law.
- Service is currently available to US and Canada-based businesses. Canadian data is processed and stored in the United States, consistent with our privacy policy. UK, EU, and Australian firms may join our waitlist.