Security posture

Report access is limited by role, API access can be suspended, and sensitive actions are written to an append-only log.

Updated 1 of 3 in Security and privacy

Access to reports and the API is limited, and sensitive actions are logged.

Who it is for. An owner reviewing how the account is protected.

  1. Only owners, admins, and people granted report access can open a report.
  2. An operator can suspend API access. Suspended accounts receive 403.
  3. From Company, any user can enroll an authenticator. That code is not required before a report in this launch.

Candidate pages stay private

Analytics do not run on the candidate invite or status pages, and those pages do not send a referrer.
Company profile, including the stored MFA setting.
Company profile, including the stored MFA setting.

See how SSNs are protected.

Was this article helpful?