Security & Trust

Trust is the product.

SignalTrust only works if you can believe it. So your data stays yours, accounts are isolated, and the AI is built to be honest — it won't make things up.

Continue with Google Read our privacy policy

Data handling

Who sees your CVOnly you

Account isolationEnforced per account

Sign-inGoogle only

Session cookieHttpOnly

Protected pagesNot cached

Selling your dataNever

Your data

Handled with care, kept to you.

Your CV powers your own career picture — nothing more. We don't sell your data, and we don't expose it to other users.

Sign in with Google

Authentication is handled through Google sign-in. There's no separate password for us to store.

Sessions are protected

Session cookies are HttpOnly, so page scripts can't read them, and protected pages aren't cached.

We don't sell your data

Your CV and profile are used to give you your career picture — not sold or shared as a product.

Account isolation

Your account is private to you.

Every account is isolated. No other user can see your CV, profile, conversations or readiness, and access to your files is checked against you as the owner. Recruiters do not browse candidate accounts.

Isolation

Scoped to your accountReads are limited to your own data.

Owner-checked file accessYour CV and reports are only served to you.

No candidate browsingRecruiters can't look through candidate accounts.

Responsible AI Example

Exactly how many days until my visa is approved?

I can't give you a precise date — that depends on processing I can't see, and I won't guess. Here's what is actually known about the timeline and your options.● Sourced · won't fabricate a date

Responsible AI

It's built not to make things up.

The advisor gives personalised, sourced answers — and when something isn't known, it says so instead of inventing a date, a number, or a company name. Missing data is shown as missing, never filled with a fabricated value.

Fairness

We score evidence, not identity.

Readiness and trust scores come from the evidence in a CV, the way a careful recruiter reads it. Every score decomposes into inspectable signals with the reasoning behind them, an honest confidence level, and a deliberately non-accusatory tone.

Evidence-based

Skills demonstrated in real experience count; unverifiable claims don't inflate a score.

Explainable

Every signal is inspectable, with the evidence and a stated confidence level.

Non-accusatory

The model surfaces possible gaps gently and avoids fabricated conclusions.

Responsible disclosure

Spotted a security concern?

If you believe you've found a security or privacy issue, we want to hear about it. Get in touch and we'll look into it.

At a glance

Data ownershipYours

IsolationPer account

AI honestyNo fabrication

Questions

Security & trust.

Who can see my CV and profile?

Only you. Your account is isolated — other users can't see your CV, profile, conversations or readiness, and recruiters don't browse candidate accounts.

How do I sign in?

With Google sign-in. There's no separate SignalTrust password for us to store, and your session cookie is HttpOnly so page scripts can't read it.

Do you sell my data?

No. Your CV and profile are used to give you your own career picture — not sold or shared as a product. See our privacy policy for details.

How does the AI avoid making things up?

It's built to refuse to fabricate facts. When something isn't known — a visa date, a salary figure, a company name — it says so instead of guessing, and missing data is shown as missing.

How do you keep scoring fair?

Scores reflect the evidence in a CV, not identity. Every score decomposes into inspectable signals with the reasoning behind them and an honest confidence level.