Security and trust

Every table of data is protected by database-level access rules tied to who you are signed in as. Hiding something in the interface is never the only protection.

Company-private records — internal employee information, financial figures such as bids and contract values, and company documents — are restricted to authorized members of that company.

Platform administration is a separate role that must be granted deliberately. Company owners and hiring managers do not get it automatically.

All uploads live in private storage. There are no public, guessable links to resumes, certifications, receipts, logbook pages or company documents; files are opened through short-lived authorized links for people entitled to see them.

Uploads are limited by file type and size.

Sign-in, password reset and email confirmation are handled by our authentication provider. Sensitive actions are re-checked on the server, so account roles cannot be changed from a browser.

Repeated sign-in, signup, reset, invitation and upload attempts are rate limited.

We hold no security certification, audit report, government approval or compliance attestation, and we do not claim any. We do not promise that any system is impossible to breach.

If you believe you have found a security problem, email EnvironmentalContractorHR@gmail.com with the details and please do not test against other people's data.