Synq← Back to homeTrust & compliance
How Synq AI safeguards applicant documents, eliminates predatory resume scraping, and isolates enterprise hiring records.
Encryption and isolation controls are implemented as described. SOC 2 is stated as alignment with the Type II criteria, not a completed audit report.
Every resume, transcript and work sample sits in encrypted storage (AES-256 at rest, TLS 1.3 in transit) behind row-level rules that name a single owner. A recruiter never queries the vault — they only see the document a candidate attached to their own application.
With blind screening on, phone numbers, exact street addresses and email handles are masked in sourcing and applicant views until an interview is confirmed. Demographic proxies never reach the first read, so early screening is judged on the work.
Employers choose how long applicant documents live — 30, 90, 180 or 365 days, or indefinitely. A nightly purge removes stored files for non-hired applications past that window and records the purge in an append-only ledger.
Roles are only published with a working application link, and links are re-verified continuously. Postings that go quiet are retired instead of left to collect applications that nobody reads.
Candidate documents are never sold, syndicated or handed to third-party sourcing brokers. They travel to exactly one place: the employer the candidate chose to apply to.
Viewing a resume, exporting applicants or purging a record writes an immutable row with the actor, the action, the IP address and the time. Nobody — including Synq staff — can edit or erase an entry.
Candidates can wipe their vault, resumes and application history from their own privacy settings at any time. The deletion runs immediately and is itself logged.
We'll send the security whitepaper covering encryption, access control, retention and sub-processors, together with a data processing addendum ready for signature.
Already a customer? Retention windows, blind screening and the audit ledger live in your compliance console. Candidates control their own data under privacy settings.