Security & Trust

Your Data is Safe
with PlaceNxt

We handle millions of resumes, interview recordings, and personal profiles every month. Security isn't an afterthought — it's built into everything we do.

99.9%
Platform Uptime
AES-256
Encryption Standard
< 24h
Incident Response
0
Data Breaches

Security Architecture

Multiple layers of protection at every level of the stack.

Data Encryption

All data is encrypted at rest (AES-256) and in transit (TLS 1.3). Your resume, assessments, and interview recordings are stored in isolated, encrypted buckets.

Identity & Access

Role-based access control (RBAC) ensures students, recruiters, and admins only see what they're supposed to. JWT tokens expire and rotate automatically.

Privacy by Design

Candidate data is never sold. Recruiters see anonymized profiles unless you explicitly opt-in. GDPR and DPDP Act compliant.

Infrastructure Security

Hosted on AWS with VPC isolation, WAF, DDoS protection, and regular penetration testing. 99.9% uptime SLA.

Data Residency

Student data for Indian institutions is stored in AWS ap-south-1 (Mumbai) to comply with data localization requirements.

Backup & Recovery

Automated daily backups with 30-day retention. Point-in-time recovery for all critical databases. RTO < 4 hours, RPO < 1 hour.

Compliance & Certifications

We meet the highest industry standards for security and privacy.

ISO 27001

Information Security Management

In Progress

SOC 2 Type II

Security & Availability

In Progress

GDPR

EU Data Protection

Compliant

DPDP Act

India Data Protection

Compliant

Our Security Practices

Regular third-party penetration testing
OWASP Top 10 vulnerability assessments
Automated dependency scanning (Dependabot)
Secret scanning on all code commits
Security training for all engineers
24/7 incident monitoring and alerting
Responsible disclosure / bug bounty program
Annual security audits by independent firms

Found a Vulnerability?

We take security reports seriously. If you've found a potential issue, please reach out responsibly. We'll respond within 24 hours and offer recognition for valid reports.

Report a Vulnerability