Security & data protection
EOC Pro Group handles candidate and client personal data on behalf of staffing firms and employers. This document describes the controls we operate, in plain language, so a security reviewer can assess us without a call.
Last updated September 2026
Encryption & transport
- •All traffic is served over TLS 1.2+; the platform terminates HTTPS and rejects plaintext requests.
- •Data at rest is encrypted by our infrastructure provider using AES-256.
- •API credentials for ATS connections are stored in an encrypted secret store and are never rendered in the app or logs.
Access control
- •Every account is authenticated; there is no anonymous access to candidate or client data.
- •Row-level security is enforced at the database layer, not just in the UI — a recruiter can only read the records they own or are assigned.
- •Administrative functions (payouts, exports, integrations, audit logs) are restricted to admin accounts.
- •AI agents operate under explicit, per-entity permissions and cannot exceed the operations granted to them.
PII handling & minimization
- •We collect only what recruiting requires: name, work contact details, work history, skills and compensation expectations.
- •We do not collect government identifiers, dates of birth, financial account data or health data.
- •Tax identification for recruiter payouts is stored as the last four digits only.
- •Blind submission mode strips identifying details before a candidate profile is shared with a client.
- •Candidate data is never sold, never shared between clients and never used to train third-party models.
Auditability
- •Sensitive record access is written to an access audit log with account, record and timestamp.
- •Outreach and AI agent actions are logged, so every email and every sourced record is attributable.
- •Provenance receipts record first contact and consent events for candidate interactions.
Integration security
- •ATS setup is self-service: pick your platform, name the connection, choose scopes, accept the data terms. No developer work, no custom code.
- •You choose the sync direction (read only, write only or two-way) and exactly which object types are in scope.
- •Credentials are requested over a one-time secure link, never typed into a shared form or emailed.
- •Connections can be paused or revoked instantly by the customer; on revoke, synced records are deleted within 30 days.
Data subject rights
- •Candidates can opt out of all outreach from any email we send; the opt-out is enforced server-side before sending.
- •Deletion and access requests are honored for candidates and clients on request.
- •Data is hosted in the United States.
Incident response
- •Suspected data exposure is investigated through our internal leak investigation process with a written record.
- •Affected customers are notified with the scope, cause and remediation of any confirmed incident.
- •Integration credentials can be rotated or revoked immediately as a containment step.
Certification status — stated honestly
EOC Pro Group is not yet SOC 2 Type II certified. We will not claim a certification we do not hold. The controls above are in place today and are documented here so they can be reviewed on their merits; formal SOC 2 Type II audit readiness is on our roadmap. If your procurement process requires a completed questionnaire (CAIQ, VSA or your own), we will complete it.
Security contact
Send security questions, questionnaires or vulnerability reports through our contact page. Reports are acknowledged and triaged before any other inbound request.