Security & data handling

• Intake — employee records are created manually, imported from CSV/TSV/TXT, or received as webhook events from systems you connect.
• Documents — resumes you upload are parsed to text and sent to an AI provider to extract skills and credentials.
• Derivation — skills, digital twins, readiness scores, gaps and risks are computed from those records.
• Output — dashboards, PDF/CSV reports you export, and the data you can delete at any time.

Every row of workforce data carries a workspace identifier and is protected by database row-level security policies, so a request authenticated as one workspace cannot read another's data even if application code is at fault.

Traffic is encrypted in transit with TLS. Data at rest is encrypted by our managed database provider.

• Email/password or Google sign-in, with roles at both platform and workspace level (owner, admin, member).
• Server-side authorisation on every privileged operation; client-side state is never trusted for role checks.
• Webhook endpoints are per-source, token-scoped and signature-verified where the provider supports it (for example GitHub HMAC).

• Only fields needed for workforce analytics are collected; free-text notes are optional.
• Deleting a resume removes its stored text and extracted analysis; deleting an employee removes their digital twin.
• Workspace deletion removes all associated records within 30 days, including backups on their rotation schedule.

• Managed Postgres and authentication provider — hosting of application and workforce data.
• AI model providers — resume and activity text processing for skill extraction and summaries.
• Error monitoring — technical logs containing IP address and request metadata.

Email security@talentos.app with steps to reproduce. Please do not test against other customers' data or run denial-of-service tests. We aim to acknowledge within 3 business days and will not pursue good-faith researchers.