Trust & security

Your data. Your candidates. Handled with care.

Straight talk about how Hire This Week stores, uses, and protects the information you and your candidates put into the system, and how we follow the rules that govern candidate communication.

Where your data lives

All customer and candidate data is stored in a hardened PostgreSQL database hosted in the United States. Application data is encrypted at rest and in transit (TLS 1.2+). Call recordings are stored in an isolated Amazon S3 bucket with separate storage for each environment and no public access.

Sign-in and access control

Sign-in is handled by Better Auth: email and password with required email verification, plus optional Google sign-in. Session tokens are HTTP-only, signed, and rotated. Every internal admin function requires a system administrator role and is logged for audit.

TCPA and A2P compliance

Candidates opt in on the application form before any text message is sent. Replying STOP works across every job and every business on Hire This Week, as carriers require. Outbound phone screens run only during business hours (8 AM to 7 PM in your company’s time zone), with a hard limit of three attempts per candidate. Our message templates are registered for A2P messaging with our carrier.

What we do with candidate information

Candidate names, phone numbers, and application answers are used only to evaluate candidates for your open roles and to communicate with them about your hiring process. We do not sell candidate data to third parties. We do not use candidates’ personal information to train AI models. Data can be exported or deleted on request.

Signups and website forms

When you sign up for your free first hire, we collect what we need to set up your account and follow up: your first name, business name, work email, mobile number, industry, and a record of when you agreed to receive text messages. Texts about your account are transactional only, and we never use your mobile number for marketing.

AI transparency

Rita, our phone screen AI, identifies herself as an automated screener at the start of every call. Candidates can hang up, opt out by text, or ask to be connected to a person. Scoring is not a black box. Every criterion score includes the candidate’s own words and the reasoning behind it, and the hiring manager makes every final decision.

What we don’t have yet

Honest about our maturity.

We’re an early-stage product. Here’s what larger buyers ask us about that we don’t have today, and where we’re heading.

  • SOC 2 Type II certification

    Not yet

    Planned for 2027, once we grow past our pilot stage. If SOC 2 is a hard requirement for you today, we’re not the right fit for your procurement process yet.

  • Single sign-on (SAML / OIDC)

    Not yet

    Google sign-in is available today. SAML and enterprise identity provider support are on our roadmap for when customers need them.

  • HIPAA compliance

    Not yet

    We are not a HIPAA Business Associate. If your hiring process involves protected health information, such as certain healthcare screening, Hire This Week isn’t the right tool right now.

  • Data storage outside the US

    Not yet

    All data is stored on US-based infrastructure. Storing data in other countries is not currently supported.

  • EU and UK GDPR

    Not yet

    We serve small businesses in the US today. Cross-border data handling under GDPR is not set up yet.

Have a question we haven’t answered?

Security and compliance questions get a direct response, usually within one business day. No support portal and no tickets.

Email us your question

For the full details, read our Privacy Policy, Messaging Policy, and SMS Terms.