Trust Center

TalentsTrust handles career and assessment data, so security is a product feature, not a policy document. Every control below is implemented in the platform today.

Access control

• Employer verification. Employer accounts are human-verified before they can browse the talent pool.
• Server-side contact masking. Candidate email and phone never leave our servers unmasked until the candidate’s profile is approved — masking is not cosmetic.
• Stealth mode. Candidates can hide name, photo and current company everywhere; identity is revealed only when they apply to a role.
• Role-gated staff access with an append-only audit trail of every moderation action.

Data ownership

• One-click JSON export of everything we store about you (Settings → Account).
• Real deletion. Deleting your account removes all data immediately; turning off assessment reuse permanently deletes stored results.
• No OAuth token retention. Google sign-in tokens are discarded right after the handshake.

Platform hardening

• TLS in transit and encryption at rest; strict security headers (CSP, HSTS) on every page.
• Rate limiting on public endpoints and write actions.
• No protected-characteristic data collected during screening; selection-rate parity monitoring built into employer analytics.

Details in our Privacy Policy and Terms. Questions: privacy@talentstrust.com.