Security
Your CV and job search are personal. This is how Jobvori protects them, described as it is built today.
Passwords
Passwords are stored only as salted hashes. They must have at least 10 characters with upper and lower case letters, a digit and a symbol.
Two-factor authentication
You can protect your account with an authenticator app and recovery codes. It is mandatory for administrators.
Sessions
Access tokens are short-lived and refresh tokens rotate, with reuse detection. Tokens live in httpOnly cookies that page scripts cannot read, and you can review and revoke your sessions.
Encryption of sensitive data
Secrets such as API keys and authenticator secrets are encrypted at rest with AES-256-GCM.
Isolation
Your data is scoped to your account on the server. Browser automation runs in a separate, isolated worker with short-lived tokens.
Human approval
An application can only be submitted after your explicit approval. Approvals are recorded.
Untrusted content
Job postings and web pages are treated as untrusted data. The AI never follows instructions found inside them.
Auditing and access control
Security-relevant events are written to an audit log, and administrative actions are restricted by role.
Report a vulnerability
If you believe you have found a security issue, please e-mail hello@example.com with the details. Do not include real personal data.