Security & trust

Our products handle hiring decisions, privileged case files and candidate video. This page states how each one treats your data, who reviews AI output, and how to get our documentation in front of your security team.

How each product handles data

The products differ enough that one blanket statement would be misleading. Here is the posture of each.

BundleStamp

Runs entirely on your device

Case files, client records and financials are processed locally on Windows or macOS. Nothing is uploaded - the only network call is a licence check.

ClauseLex

Public corpus, private matters

The judgment corpus is built from the Indian Kanoon API and openly licensed AWS Open Data. Your matters, drafts and research history are yours and are not part of that corpus.

CareerUplift Recruiter

Isolated workspace available

The Private plan runs your hiring data in an isolated workspace. Every scoring and shortlist decision is logged with its rationale so it can be reconstructed later.

KrasCheck

Evidence for a reviewer, never an automatic verdict

Integrity signals are surfaced to a human reviewer with the evidence that produced them. KrasCheck does not reject, fail or penalise a candidate on its own.

QwikIQ

Public shelf data

Tracks publicly visible listing, pricing and availability data on quick-commerce platforms. It does not ingest your internal sales or customer data to operate.

Candidates and automated decisions

Candidates are the people with the least power in a hiring process and the most at stake, so two rules apply across every talent product we run:

  • No consequential decision is made by a model alone. AI screens, scores and flags. A person decides who advances and who does not.
  • Every score carries its reasoning. A ranking a recruiter cannot explain is a ranking we would not build - which is also what makes a decision defensible if it is ever challenged.

Proctoring carries obligations beyond this. If you are deploying KrasCheck, talk to us about the consent your candidates see, what is recorded, and how long it is kept - we will not deploy it into a process that hides those answers from candidates.

Documentation for your security review

We would rather answer your questionnaire directly than publish a page of claims. Write to us for data-processing terms, our subprocessor list, retention schedules, data-residency options, current certification status, or a completed security questionnaire in your own format. We reply within one business day.

See also our Privacy Policy, Terms of Service and engineering standard.