Security

Security Overview

This overview explains the security posture behind JobSense account workflows, Quick Match analysis, and saved member experiences. It focuses on product controls, workflow guardrails, and the shared practices that keep sensitive career data safer.

Verified Stripe webhook eventsConsent-gated AI workflowsTime-bounded public analysisRole-based access boundaries
01

Billing integrity

Paid upgrade checkout is initiated through Stripe-hosted sessions so payment authorization stays inside a dedicated payment processor workflow.

  • JobSense creates Stripe checkout sessions server-side with authenticated account metadata rather than exposing upgrade logic directly in the browser.
  • Signed Stripe webhook events are verified before paid-tier access is upgraded inside the application.
  • The current rollout keeps payment handling limited to a narrow upgrade flow while broader subscription-management controls are still being built, and the methods shown in checkout still depend on Stripe configuration, supported currency, subscription support, merchant eligibility, and session context.
02

Security foundations

JobSense is designed around layered controls for transport, storage, access, and workflow integrity so that career data is handled with care throughout the product lifecycle.

  • Encrypted transport is used when data moves between your browser and platform services.
  • Stored workflow data is protected by infrastructure-level security controls, including encryption-oriented storage practices.
  • Access to operational tools is intentionally limited to authorized contexts and roles.
03

AI workflow guardrails

Public Quick Match and member AI workflows are bounded by consent, workflow state, and product-specific retention behavior rather than open-ended reuse.

  • Quick Match requires an active consent document before scoring begins.
  • Public submissions are structured to stay temporary unless you explicitly continue into an account workflow.
  • AI outputs are scoped to the requested role analysis, profile enrichment, or tailoring workflow.
04

Account protection

Member accounts are protected through standard authentication boundaries, limited admin access, and workflow checks that reduce accidental data crossover between users.

  • Authenticated routes enforce account checks before protected member or admin content is shown.
  • Operational diagnostics such as the system status page are restricted to authenticated admin accounts.
  • Social sign-in can establish a passwordless account first, and members can later add a password from Settings if they want a second login method.
  • Saved Quick Match results must be explicitly linked before they become part of a member workflow.
  • Operational audit and state-tracking data help detect unusual behavior and recover from interrupted flows.
05

Response and recovery

When something abnormal happens, the goal is to contain impact quickly, restore normal operation, and preserve trustworthy workflow state.

  • We investigate service anomalies, rollout issues, and abuse signals that could affect data integrity or access continuity.
  • Temporary pauses, cleanup routines, and staged rollout controls may be used to protect reliability.
  • Workflow state is recorded so that interrupted analysis, onboarding, and account-linking steps can be resumed safely.
06

Shared responsibility

Security is strongest when users treat career data carefully before and after it enters the platform.

  • Use strong passwords and avoid reusing credentials across unrelated services.
  • Keep provider access to your Google, Apple, or LinkedIn account secure because social login trust depends on that upstream identity.
  • Upload only the CVs, job descriptions, and internal documents you are authorized to process.
  • Review AI-generated recommendations before sharing them externally or embedding them in formal submissions.
If you believe a workflow or account behaved unexpectedly, stop using the affected session and route the issue through your normal JobSense support or operations channel.