Security & privacy

Controls built for a narrow candidate-notice workflow.

Notice Tracking is designed to use the minimum candidate information needed for a configured notice workflow, keep customer workspaces separated, and preserve structured records of what happened.

Data minimization

The application is designed for candidate name, email, jurisdiction, job reference, linked hiring tool, notice status, and delivery events. It excludes resumes, Social Security numbers, demographic data, assessment scores, interview notes, background checks, and medical data.

Workspace separation

Customer records are tenant-scoped. Application access checks and database policies are designed to limit records to authorized members of the relevant customer workspace.

Access controls

Roles control access to sensitive actions. Owners and administrators can enable multi-factor authentication. Billing actions are restricted to the workspace owner.

Record integrity

Notice, delivery, consent, and audit events are designed as append-only application records. The application distinguishes a send/provider-accept response from later delivery or failure events.

Controlled sends

A notice cannot be sent from an unapproved template version. Template approval requires a recorded attorney review; customers remain responsible for their approved language and legal decisions.

Protected integrations

Outbound-provider and billing webhooks are validated before the application processes them. Sensitive service credentials are kept server-side rather than exposed in the browser.

What this overview does-and does not-promise

This page describes current product controls, not a certification, legal guarantee, or complete security assessment. For security, privacy, or data-handling questions, contact Notice Tracking. Do not submit candidate records or other sensitive information through the marketing-site forms.

Legal documents

These pages describe the current public terms, privacy, processing, and retention information for Notice Tracking.

Review the workflow before sharing data.

We can discuss your notice process, data fields, and evidence needs without asking for candidate files.