Product conditions
Shared responsibility
PolpoHire operates under a shared responsibility model. We secure and operate the platform. Tenants are responsible for secure usage within their organization.
PolpoHire responsibilities
- Infrastructure security, hosting controls, and platform patching.
- Data protection controls including encryption in transit and at rest.
- Application security controls such as authentication and the RBAC framework.
- Operational security, monitoring, incident response, and restore procedures.
- Compliance support features including audit logging and data handling workflows.
Tenant responsibilities
- User lifecycle management, permissions, and access revocation.
- Lawful data processing and retention policies for candidate data.
- Endpoint and credential security inside the tenant organization.
- Security review and management of third-party integrations and API keys.
- Internal process controls, training, and compliance governance.