Back to home

Security

RingRecruit stores sensitive candidate data — names, phone numbers, call recordings. Keeping it safe is foundational to the product.

Encryption in transit and at rest

All traffic is served over TLS. Data is encrypted at rest using industry-standard AES-256.

Least-privilege access

Employee access is role-scoped and audited. Production credentials rotate regularly and require hardware-backed MFA.

Hosted on Vercel and Supabase

Infrastructure runs on SOC 2-compliant providers. Application traffic is isolated per customer; candidate records are scoped by organization.

Responsible disclosure

Found a vulnerability? Email security@ringrecruit.com. We acknowledge within one business day and credit researchers who follow responsible disclosure.

For security questions, our security.txt, or to request our current subprocessor list, email security@ringrecruit.com.