Security

How Hure handles interview data

Hure does not store interview audio. It keeps the transcript and the scorecard derived from it, hosted in the United States, separated per employer and access-controlled to the employer's team. Scoring reads the transcript only, and a person makes every hiring decision.

Security at a glance

01

Zero biometrics, by design

Scoring reads the transcript, never audio, image or tone. Hure takes no voiceprints, does no facial analysis and infers no emotion.

02

No interview audio stored

Audio is used live to run the conversation and is not stored. From the interview itself, Hure keeps only the transcript and the scorecard derived from it.

03

Hosted in the United States

The Hure platform is hosted in the United States, on Google Cloud in the US East region, with its database on Neon. Data is encrypted in transit and at rest.

04

Isolated per employer

Row-level security in the database separates each employer's data, on every tenant-scoped table. Interviews and scorecards are owner-only and access-controlled to the employer's team.

05

No candidate account

Candidates open a single-use signed link tied to their own interview. They never create an account or sign in. Sign-in is for the hiring team.

06

A human always decides

Hure proposes scores, each tied to a moment in the transcript. A person on the hiring team reviews them and makes every hiring decision.

07

AI hiring laws

NYC Local Law 144 and the EU AI Act both regulate AI used in hiring. Our guides explain what each law requires and where Hure's design stands. They are not legal advice, and your obligations as an employer remain yours.

Subprocessors

These are the services that process data to run Hure in production, and what each one is used for.

Hure subprocessors and their purpose
SubprocessorPurpose
OpenAISpeech-to-text, the language model that runs the interview, and scoring from the transcript
ElevenLabsText-to-speech voices for the interviewer
CartesiaText-to-speech voices for the interviewer
LiveKitReal-time voice transport, self-hosted on Google Cloud
Google CloudApplication hosting, US East
NeonPostgres database
CloudflareDNS, CDN, the marketing site and its forms
ClerkRecruiter sign-in (candidates never sign in)
PostHogCookieless product and site analytics

Retention

  • Interview transcripts and scorecards are kept while the employer's account is active.
  • They are deleted at the employer's request, and within 30 days after an account is closed.
  • Candidates can ask for deletion through the employer who invited them.
  • We do not store interview audio. From the interview itself, only the transcript and the scorecard derived from it are kept.

Controls

Our controls are aligned with SOC 2 Type II: access control, encryption in transit and at rest, logging, and documented subprocessors. We do not hold a SOC 2 report yet.

Questions from your security team? Write to hello@usehure.com.

Security questions

Does Hure store interview audio?

No. Hure does not store interview audio. The audio is used live to run the conversation, and from the interview itself, only the transcript and the scorecard derived from it are kept.

Where is Hure's data hosted?

In the United States. Hure runs on Google Cloud in the US East region, with its database on Neon, and data is encrypted in transit and at rest.

Who can see a candidate's interview?

The hiring team at the employer that ran it. Interviews and scorecards are owner-only and access-controlled to that employer's team, and row-level security in the database keeps each employer's data separate.

How do you handle deletion requests?

Interview transcripts and scorecards are deleted at the employer's request, and within 30 days after an account is closed. Candidates can ask for deletion through the employer who invited them.

Does Hure use biometrics or emotion analysis?

No. Hure has zero biometrics by design. Scoring reads the transcript, never audio, image or tone, so there are no voiceprints, no facial analysis and no emotion inference.

Does Hure have a SOC 2 report?

Not yet. Our controls are aligned with SOC 2 Type II: access control, encryption in transit and at rest, logging, and documented subprocessors. We do not hold a SOC 2 report yet.

Which subprocessors does Hure use?

OpenAI, ElevenLabs, Cartesia, LiveKit, Google Cloud, Neon, Cloudflare, Clerk and PostHog. Together they provide speech-to-text, the language model and scoring, the interviewer's voices, real-time voice transport, hosting, the database, the marketing site, recruiter sign-in and analytics.

Request access

Request access and we'll email your invite when your team is ready. No spam.