AIVENTURA is built for enterprises that handle sensitive candidate data. This overview summarizes our security controls and compliance posture.
Data Encryption
- In transit: TLS 1.2+ for all API and dashboard traffic
- At rest: AES-256 encryption for databases and file storage
- Keys: Managed via cloud KMS with automatic rotation
Access Controls
- Role-based access control (RBAC) for dashboard users
- API keys scoped to environments and permissions
- MFA enforced for admin accounts
- IP allowlisting available on Enterprise plans
Compliance
- GDPR and DPDP-aligned data processing
- Configurable data retention and deletion policies
- Candidate consent management with audit trails
- SOC 2 Type II audit in progress
Data Residency
Choose India, EU, or US data regions at account setup. Cross-border transfers use Standard Contractual Clauses where required.
Audit Logging
All API calls, dashboard actions, and data access events are logged with timestamps and actor identity. Export logs via API or request compliance reports from your account manager.