Where your data lives
All files and data sit in our EU data center in Frankfurt. No transfer to the US or anywhere else. GDPR and KVKK compliant.
Security & Data
How your CV is protected, where it lives in the EU, how AI services see it — straight answers.
Encryption
Account passwords are hashed with Argon2id (OWASP 2024 standard). Link access passwords use the same scheme. Watermark, expiry, and email gating are server-enforced.
IP addresses
Raw IPs are never written to the database. They're hashed with SHA-256 + an application pepper, used only for anonymized stats. GDPR-aligned.
AI and PII
Before any AI request, national IDs, IBANs, phone numbers and emails are auto-masked. Services like DeepSeek/OpenAI never see raw personal data. This runs as mandatory middleware.