Security at Clarentia

Clarentia is designed to protect recruitment data, candidate information, customer workspaces and AI-assisted hiring workflows through secure cloud infrastructure, access controls, encryption, logging, vulnerability management and operational safeguards.

Our security approach is based on three principles:

• Protect candidate and recruitment data throughout the hiring workflow
• Give customers control over their users, roles and recruitment operations
• Maintain secure, monitored and resilient application infrastructure

Secure cloud infrastructure

Clarentia is hosted on Amazon Web Services in the AWS Europe (Paris) region, eu-west-3.

Production, staging and development environments are separated to reduce operational risk and prevent non-production activities from affecting the production application.

Customer data is hosted on cloud infrastructure designed to provide physical security, network security and infrastructure-level resilience.

Data encryption

Clarentia protects data in transit and at rest.

Data transmitted between users and the Clarentia application is encrypted using secure HTTPS/TLS connections.

Data stored within Clarentia’s cloud environment is encrypted at rest using AWS infrastructure encryption mechanisms.

Authentication and access control

Clarentia supports user authentication through Google, Microsoft and LinkedIn sign-in, as well as email and password authentication.

Clarentia uses role-based access controls to ensure users can only access the features and data relevant to their role.

Customer administrators can manage users within their company workspace and assign appropriate permissions to recruiting team members.

Clarentia currently supports the following role structure:

• Company_Admin
• Company_Recruiter
• Clarentia_ops
• Clarentia_super_admin

Internal administrative access is restricted and logged.

Customer user management

Customer administrators can manage access to their company workspace, invite or remove users, and assign roles based on operational responsibilities.

This helps customers enforce internal access policies and limit recruitment data access to authorized users.

Protection of recruitment and candidate data

Clarentia is built to handle recruitment data, including job information, candidate profiles, CVs, interview transcripts, AI-generated assessments, campaign settings and recruiter actions.

Security controls are designed to protect this information throughout the recruitment workflow, including during candidate screening, sourcing, interview assessment and recruiter review.

Integration and credential security

Clarentia may connect with external recruitment services, job boards, sourcing providers and multiposting partners.

Where customer-provided job board credentials are stored in Clarentia, they are encrypted and protected against unauthorized access.

Access to integration credentials is restricted, and internal administrative access is logged.

Logging and auditability

Clarentia maintains audit logs to support security monitoring, accountability and operational traceability.

Internal administrative access is logged.

Application logs help Clarentia investigate security events, support customer requests and monitor important actions within the platform.

Vulnerability management and penetration testing

Clarentia performs vulnerability scanning to identify and address potential security weaknesses.

Vulnerability scanning is performed on a recurring basis, currently scheduled every two months.

A penetration test has been completed to assess the security of the application and support the improvement of Clarentia’s security posture.

Backups and resilience

Clarentia maintains backup mechanisms designed to reduce the risk of accidental data loss and support operational recovery.

Clarentia uses Amazon Data Lifecycle Manager to perform daily EBS snapshot backups of tagged production instances.

Backups are scheduled daily at 02:00 UTC and retained for 5 days under a rolling retention policy. Older snapshots are automatically deleted according to the retention policy.

Incident reporting

Security concerns can be reported to: security@clarentia.com

Privacy and data protection requests can be sent to: DPO@clarentia.com

Clarentia maintains an incident handling process to assess, investigate and respond to reported security events.

Shared security responsibility

Security is a shared responsibility between Clarentia and its customers.

Clarentia is responsible for securing the application infrastructure, platform-level access controls, encryption, logging, backups and operational security processes.

Customers are responsible for managing their users, assigning appropriate roles, protecting their own login credentials, configuring recruitment workflows appropriately and ensuring that their use of Clarentia complies with their internal policies and applicable laws.

Infrastructure compliance

Clarentia is hosted on AWS infrastructure.

AWS maintains a broad set of infrastructure-level compliance programs for eligible AWS services. These programs support Clarentia’s security foundation, but they do not mean that Clarentia itself is independently certified under ISO 27001, SOC 2 or similar standards.

Clarentia’s own application-level controls, policies and procedures are managed separately.