Security

How we protect your data today, and what we do not claim.

What we do

• Candidate personal data is stripped through anonymization before AI calls; non-Latin text is redacted by default.
• Customer AI keys are encrypted at rest and never shown again after entry.
• Every rejection needs confirmation from a person on your team.
• Candidate hard-delete removes the CV, extracted text and scores.
• No advertising trackers, and no training on customer data.

What we do not claim

ShortlistKit holds no security certifications such as SOC 2 or ISO 27001. We do not offer a data processing agreement or an uptime guarantee at this stage. If your organization needs these, please ask us before you start.

Report a problem

Found a security issue? Email support@shortlistkit.com.

Questions? Email support@shortlistkit.com. This page describes how the product behaves today; it is not a certification or an audit report.