• · SOC 2 Type II — audited annually
• · ISO 27001 — in progress, expected Q4 2026
• · GDPR, CCPA, LGPD, and DPDP compliant
• · HIPAA-eligible infrastructure (not currently in-scope for CareerOS)

Isolated tenants inside enterprise-grade cloud infrastructure. Every write is replicated across at least three availability zones. Automated daily backups with 30-day retention.

Regional pinning available for EU (Frankfurt), UK (London), US (Virginia), and India (Mumbai).

AES-256 encryption at rest. TLS 1.3 in transit. Encryption keys managed via a hardware-backed KMS with automated rotation.

Field-level encryption for the most sensitive data (compensation, offer letters, government ID).

• · SSO via SAML and OIDC (Enterprise plan)
• · Role-based access control with least-privilege defaults
• · Mandatory 2FA for all staff, hardware keys for engineering
• · All production access logged, reviewed weekly

Your Career Memory is never used to train foundation models. We route inference through providers with zero-retention agreements.

Prompt injection defenses, output filters, and rate-limits protect against malicious job listings and abusive third-party content.

• · 99.95% uptime target · 99.98% trailing-12-month actual
• · Live status page at status.silverspringstaffing.com
• · Public post-mortems within 5 business days of any Sev-1 incident

If you've found a vulnerability, please report it to security@silverspringstaffing.com. We commit to acknowledging within 24 hours and remediating verified findings within 30 days.

We run a paid bug bounty for qualifying reports — details on request. Please act in good faith, avoid privacy violations and service disruption, and give us reasonable time to fix before public disclosure.

security@silverspringstaffing.com · +1 941 940 9896

30 N Gould ST STE R, Sheridan, WY 82801, USA

PGP key on request.