Security
Enterprise-grade by design.
Hiring data is sensitive. Pivvix is built so protecting it is the default, not a setting.
Data protection
Candidate data is encrypted in transit and at rest. Interview recordings and transcripts are stored in private buckets with time-limited access.
Access control
Access is scoped per team and per role. Row-level security is enforced at the database, not just the application layer.
Auditability
Every AI evaluation is logged with the evidence behind it, and mutating actions are recorded — so you can always answer 'why did the system do that?'.
Compliance roadmap
We are building toward SOC 2 Type II and ISO 27001. The architecture has been documented against those controls from the start; formal certification is in progress.
Have a security question?
Send it to our team and we'll get you the detail you need for review.