Trust

Security & consent

How Hirably protects the people it verifies.

Consent first

Every check starts with the candidate. They receive their own link, see exactly what will be checked and for how long, and can decline. Consent and its timestamp are stored with the case.

Data protection

• Traffic is served over HTTPS with modern TLS.
• Identity references are stored as one-way hashes, never as readable numbers.
• Evidence documents live in private storage and are reachable only through expiring links.
• Access is role-based: reviewers see only the cases assigned to their workspace.
• Row-level database policies scope every record to its owner.

Factual reporting only

Hirably reports what was observed and what could not be confirmed. We do not publish risk scores, ratings or hiring verdicts about individuals.

Right of reply

Any worker can look up a record about themselves and dispute it. A disputed record is frozen while it is reviewed, and records that cannot be substantiated within the deadline are removed.

Reporting a vulnerability

Email security@hirably.com with details. We acknowledge reports within three business days and will not pursue action against good-faith research.