Enterprise security
Built to pass your security review.
You trust us with candidate data worldwide. Encryption, residency, and zero retention come as defaults.
The measures
Security treated as a product feature, not an afterthought.
TLS 1.3 in transit
Every byte in motion is protected by TLS 1.3, with HSTS enforced and older protocol versions rejected outright.
AES-256 at rest
All stored data is encrypted at the storage layer with AES-256, enforced at the database level across every environment.
EU data residency
Candidate data is processed and stored in the region you choose, EU by default, so it never crosses a border you did not pick.
Zero retention on sync
ATS integration payloads are processed in memory only. We transform what we need and discard the raw data after each sync.
Annual penetration tests
Independent third parties pen-test Chesky every year. Findings are triaged and remediated within severity-based SLA windows.
Responsible disclosure
A standing program for security researchers. Report to security@chesky.ai and we respond within 48 hours, no legal threats.
Compliance
How Chesky maps to GDPR and CCPA.
Across data handling, candidate rights, and breach response. The full DPA and sub-processor list are available for enterprise review.
| Requirement | GDPR | CCPA |
|---|---|---|
| Data encryption at rest | ||
| Data encryption in transit | ||
| Access control & RBAC | ||
| Audit logging | ||
| Data deletion / right to erasure | ||
| Data portability | ||
| Breach notification (72h) | ||
| Sub-processor agreements | ||
| Annual risk assessment | ||
| Opt-out mechanisms |
Send us your security questionnaire. We have answers.
Enterprise customers get a full DPA, a sub-processor list, and a walkthrough with our team. Researchers can report a vulnerability to security@chesky.ai.