Skip to content
Security

Built to protect sensitive candidate information.

Scrynova processes resumes, recordings and evaluations. We treat that responsibility seriously with layered technical, organizational and product safeguards.

Encryption

HTTPS/TLS for all traffic with HSTS. Data is encrypted at rest by our infrastructure provider.

Tenant isolation

Every company has an isolated workspace. Authorization is enforced on the server for every request — organizations can never access each other's jobs, candidates, recordings, results, billing or team.

Role-based access

Owner, HR Manager, Recruiter, Hiring Manager and Viewer roles with least-privilege permissions.

Strong authentication

Email verification, securely hashed passwords, optional multi-factor authentication and managed sessions.

Secure media

Recordings and resumes are stored privately and served only through short-lived signed URLs to authorized users.

Upload protection

File type validation by content, size limits and malware scanning for uploaded documents.

Application security

Rate limiting, CSRF-safe session cookies, security headers and protection against common web vulnerabilities (OWASP Top 10).

Audit logs

Sensitive actions — sign-ins, permission changes, evaluation changes, deletions and exports — are recorded.

Backups & recovery

Regular encrypted database backups and documented disaster-recovery procedures.

Candidate privacy

Informed candidates, every time.

Before any recording begins, candidates see a clear notice and give consent. Their consent is recorded with a timestamp and notice version.

  • What data is collected and why it is recorded
  • That automated, job-related screening may be used
  • Who can access their responses
  • How long information is kept
  • International data transfers
  • How to request access or deletion
  • How to request an accommodation
Responsible screening

Safeguards against unfair evaluation.

Screening focuses on job-related qualifications and answer content.

Scrynova never evaluates

Race · gender · age · disability · appearance · accent · facial expressions · inferred emotions · other protected characteristics.

People stay accountable

No automatic rejections. Every evaluation shows its evidence, can be corrected or flagged by recruiters, and keeps a full history. Employers retain responsibility for hiring decisions.

Data retention

You control how long data is kept.

  • Configurable candidate data and recording retention per organization
  • Secure deletion of recordings, transcripts and derived screening data
  • Candidate deletion requests and data export
  • Legal holds where retention is required
  • Automatic cleanup of temporary files
  • Defined retention after subscription cancellation
Compliance

Designed for global privacy requirements.

Scrynova is designed to support employers' obligations under PIPEDA, Québec Law 25, the EU GDPR and UK GDPR, U.S. state privacy laws and other national privacy laws, accessibility requirements (AODA, ADA and WCAG 2.1 AA practices) and emerging rules on automated employment decision tools. A formal legal and accessibility review is part of our launch process.

Found a vulnerability? Please report it responsibly to security@scrynova.com. We appreciate coordinated disclosure.

See also our Privacy Policy.

Start screening smarter today.

Create your workspace in minutes. Your three-day free trial includes every feature — no credit card required to start.