JobzMall Trust Center

JobzMall uses TLS to protect sensitive information in transit and AES encryption to protect sensitive information at rest in in-scope systems, access follows least-privilege principles, networks are segmented and firewalled, and systems are continuously monitored and logged. These controls are independently audited under SOC 2 Type II and ISO/IEC 27001:2022.

Yes. All data is encrypted in transit using TLS 1.2 or higher and at rest using AES-256. Datastores holding sensitive customer data are encrypted, and privileged access to encryption keys is restricted to authorized personnel with a documented business need.

Yes. JobzMall supports single sign-on (SSO) and SAML for workforce access, and MFA is enforced for remote access to production systems. Access is provisioned by job role with manager approval, and passwords must meet our documented complexity policy.

Independent penetration tests run at least once a year, and we scan our external-facing systems for vulnerabilities at least quarterly. Anything critical or high-severity is tracked until it's fixed.

We follow a documented incident response plan that we test at least once a year, with a dedicated on-call team. If an incident affects you, we notify you promptly in line with our contractual and legal obligations.

Yes. We back up production data regularly to a separate location and maintain business continuity and disaster recovery plans that we test at least once a year.

Only authorized employees whose job requires access can view customer data. Access requires manager approval, is reviewed regularly, and is removed promptly when someone leaves the company. All employees also pass background checks and complete security training.

Your data is hosted on Amazon Web Services (AWS) in secure, access-controlled data centers, with production environments kept isolated from testing and development. Enterprise customers can configure data residency to keep data in a specific region — contact us to discuss your requirements.

No. JobzMall does not sell personal information for monetary consideration. Certain advertising or data-disclosure activities may be treated as a “sale” or “sharing” under broad state-law definitions. Eligible users can exercise applicable opt-out rights through JobzMall’s privacy controls.

We keep your account data for as long as your account is active. When you leave, we purge or remove your confidential data from our systems in line with our retention and deletion policies.

You own your data and can ask us to access, correct, delete, or export it at any time. We honor GDPR and CCPA rights — email [email protected] and we'll handle your request within the required timeframes.

Yes. View our current subprocessors in the Subprocessors tab. Contact [email protected] for questions, notification requests, or a copy of our DPA.

Candidate profiles, videos, and other personal data get the same protection as all customer data — including the encryption and access controls described above — and are handled under our data classification policy.

Yes. JobzMall holds a SOC 2 Type II report and is independently audited. Request the current report from the Resources tab; it's shared under NDA.

Yes. JobzMall is certified to ISO/IEC 27001:2022. Verify our certificate on IAF CertSearch, or request a copy from the Resources tab.

Yes, JobzMall is aligned with the GDPR. We honor data-subject rights, engage subprocessors under data-protection terms, safeguard international transfers, and will sign a Data Processing Agreement (DPA) on request.

Yes, JobzMall is aligned with the CCPA/CPRA. California residents can access, delete, and correct their data and opt out of its sale or sharing — and we don't sell personal data.

Yes. We'll sign a DPA covering how we handle personal data on your behalf, including subprocessors and international transfers. Request one at [email protected].

JobzMall uses AI to summarize information and power better-designed tools that make our users more productive. We don't use AI to match, rank, or recommend candidates — hiring decisions are always made by people.

No. JobzMall doesn't use AI to make or recommend hiring decisions. AI only helps summarize information; every decision about a candidate is made by people.

Users retain the intellectual-property rights they hold in content they submit. Users grant JobzMall the licenses described in the Terms of Use so JobzMall can host, process, display, secure, and provide the service.

Open the Resources tab, pick the document you need, and enter your work email to request access. Gated documents like our SOC 2 Type II report, ISO 27001:2022 certificate, and penetration test summary are shared under a mutual NDA.

Email [email protected] to report a vulnerability or security concern. We investigate every report and support responsible disclosure — please include enough detail for us to reproduce the issue.

Email [email protected] for security and privacy questions, including data-subject requests, or [email protected] to request or reclaim documentation access in this Trust Center.

Use the Request Access button in the header or on any gated document, and enter your work email. To restore access you had before, choose “Reclaim access” in the same dialog.