Security

How JobLynk protects your data

Hiring data is personal. This page describes the controls that are in place today for your team and for the candidates you talk to, in plain language.

Ask a security question Privacy Policy

Certifications and compliance

Independently certified. Openly stated.

  • Certified

    ISO/IEC 27001:2022

    Information security certified

    Our information security management is certified to the international ISO/IEC 27001:2022 standard.

  • In progress

    SOC 2

    Independent audit underway

    An independent audit of our security controls is underway. We will say so plainly when it is complete.

  • Compliant

    TCPA / A2P

    Texting and calling rules

    Our texting and calling is TCPA and A2P compliant, and candidates can opt out at any time.

Sign-in you can trust

  • One-time passcodes that expire after 5 minutes, lock after 5 wrong tries and limit how often they can be requested
  • Sign in with Google or LinkedIn
  • Password rules enforced when you sign up or reset
  • Sessions in secure, HttpOnly cookies that expire after 7 days and can be revoked

Roles and company separation

  • Separate roles for recruiters, hiring managers, candidates and platform admins
  • Jobs, applicants and interviews are scoped to the signed-in user’s company and role, and denied by default
  • Admin tools need an admin role

An audit trail

  • A separate audit database records who did what, when, and with what result
  • Passwords and tokens are kept out of the log
  • Entries are kept for 90 days
  • Admin sessions inside customer accounts are recorded, including who started them

Safeguards for candidate outreach

  • Replying STOP to a text turns off texting for that person
  • Emails can be unsubscribed with a signed one-click link
  • Do not contact, do not email and do not SMS flags are respected before outreach goes out
  • Inbound text-message callbacks are verified before they are accepted

Notice and consent

  • Candidates are told that an AI interviewer is conducting the interview
  • Consent for texts, AI processing and data extraction is recorded with a timestamp, IP address and browser
  • Candidates are told that suspicious activity is recorded and shared with the hiring team

Recordings and files

  • Interview recordings are stored in cloud storage and delivered through time-limited links
  • File uploads are limited by type and size

Hosting and network

  • Hosted on Amazon Web Services in the United States
  • Every JobLynk site is served over HTTPS with TLS 1.3 and HSTS, through Cloudflare
  • The audit log has its own database, separate from the main one

Monitoring

  • Text and email delivery is monitored, and our team is alerted when sending fails
  • Outreach calls are throttled and retried a limited number of times

People stay in charge of hiring decisions

Our privacy policy states that JobLynk makes no fully automated hiring or rejection decisions. Interview scores, summaries and fraud findings are evidence for your recruiters and hiring managers to review. They decide who moves forward.

Your data and your candidates’ data

Candidates can ask us to delete their data by emailing us. Our Privacy Policy explains what we collect, how we use it and what rights people have.

Privacy PolicyTerms of Use

Certifications and compliance

We hold ISO/IEC 27001:2022 certification. A SOC 2 audit is in progress, and we will say so plainly when it is complete. Our texting and calling is TCPA and A2P compliant. If your security team needs a copy of our certificate, a security questionnaire or an architecture overview, ask us and we will answer plainly.

[email protected]

This page describes controls in place as of 3 November 2026. Our systems change over time, so details may be updated. If you believe you have found a security problem, please email [email protected].

Get started with JobLynk

Find the talent you need and verify who is really on the other side of the screen, at scale.

Book My Demo Contact us