CalHired is designed to limit access to user-owned records and files. Security measures may include authenticated access, row-level database controls, private file storage, encryption in transit and at rest where provided by the infrastructure, server-side secrets, rate limits, request idempotency, audit logs, and restricted administrative tools.
Security is a shared responsibility and no system is completely secure. CalHired does not promise that attacks, provider outages, software defects, or unauthorized access will never occur.
Reporting security concerns
Report suspected vulnerabilities or unauthorized access to security@calhired.com. Do not publicly disclose personal data, exploit an issue, or access another user's account while reporting.