Security

Agency data deserves adult handling.

Candidates, clients, and commission records are sensitive. Bold Employ is built around isolation, encryption, and clear access control.

  • Encryption

    TLS 1.3 in transit. AES-256 at rest. Candidate and client data stays protected end to end.

  • SOC 2 practices

    Controls aligned with SOC 2 Type II expectations, with independent review on a recurring cadence.

  • Multi-factor auth

    Optional MFA via authenticator apps, SMS, or security keys for accounts that need the extra layer.

  • Infrastructure

    Hosted on AWS with redundancy, DDoS protection, and routine patching.

  • Audit logging

    Activity logs for access and changes, so you can answer compliance questions with evidence.

  • Backups

    Automated daily backups with point-in-time recovery and 30-day retention.

  • Access control

    Role-based permissions so desks only see what they should. Admins keep full oversight.

  • Tenant isolation

    Strict multi-tenant separation. Your agency data does not mix with another firm's book.

Need a security packet?

For questionnaires, DPAs, or architecture reviews, email sales and we will route it to the right person.

Request details