Trust & Security
Security at Kyvora
Kyvora is designed to support recruiting workflows that may involve candidate contact information, screening responses, message history, and customer-configured recruiting criteria.
We take security seriously and use commercially reasonable administrative, technical, and organizational safeguards designed to protect the platform and the data processed through it.
Security principles
Least-Privilege Access
Access to systems and data should be limited to authorized users and only to the extent needed for legitimate business, support, security, or operational purposes.
Encryption
Kyvora uses encryption in transit for data transmitted through the platform. Where supported by our infrastructure providers, data is encrypted at rest.
Auditability
Kyvora is designed to maintain operational and access-related records that support troubleshooting, security review, and compliance workflows.
Secure Development
We aim to review security-sensitive changes carefully, limit unnecessary data exposure, and avoid building features that bypass consent, opt-out, or access-control expectations.
Vendor Review
Kyvora uses third-party providers for services such as messaging, email, database infrastructure, hosting, AI processing, and payment-related workflows. We evaluate providers based on security, reliability, and fit for the platform.
Customer responsibilities
Security is shared. Customers are responsible for maintaining strong passwords, restricting account access to authorized users, promptly removing access for former employees, reviewing candidate data before upload, and using the platform in accordance with applicable laws and agreements.
Reporting a security concern
If you believe you have discovered a security issue involving Kyvora, please contact security@kyvoratech.com. Include enough detail for us to understand and reproduce the issue where possible.
We review security reports in good faith and appreciate responsible disclosure. Please allow reasonable time for investigation before public disclosure.
No guarantee
No system can be guaranteed to be 100% secure. Kyvora does not guarantee that unauthorized access, data loss, misuse, or security incidents will never occur. In the event of a data breach, we will notify affected Customers in accordance with applicable law.
Security questions?
security@kyvoratech.com