Security
Interviews contain personal information. Here’s where it’s stored, who can see it and how it’s protected. We only claim what we actually do.
Servers and database run on Google Cloud in Mumbai.
Every connection uses HTTPS. Our cloud providers also encrypt the data they store.
Everyone signs in with a one-time code sent by email, so there are no passwords to leak or reuse.
Every request for data is limited to your own company. No other company can see your candidates.
Recordings and documents open only through links that stop working after a few minutes.
Admins manage the team and settings. Members review candidates.
We keep a log of status changes and of anything LessRounds staff do in your account.
Our website tells browsers to use extra security settings that block common attacks.
In detail
Companies and candidates sign in with a six-digit code sent to their email. We store each code only in scrambled form (a hash). A code expires after 10 minutes and stops working after five wrong guesses. We also limit how many codes can be requested for each email address and from each network. Once someone signs in, their browser holds a sign-in key. We store only a scrambled copy of that key, so even a copy of our records couldn’t be used to sign in. A company sign-in and a candidate sign-in are kept separate, even in the same browser.
During an interview, the candidate’s browser connects to OpenAI directly. It uses a temporary key that works only for that one interview. Our servers never give out a permanent key. The transcript is saved during the interview, and the recording is uploaded to private storage when it ends.
A small number of LessRounds staff can manage accounts: for example add credits, add a team member or fix an interview when you ask us, or suspend an account that is being misused. When staff work in your account, their changes show as “LessRounds support”. Every change they make, and every candidate they open, is logged. Staff are signed out after 12 hours, and a support visit ends after 60 minutes. We look at candidate data only when you ask us to help with something specific, or to fix a problem.
Recordings are kept for up to 3 years. To have a candidate’s data or your whole account erased sooner, email privacy@lessrounds.ai and we’ll delete it. Copies in our database backups are removed when those backups expire on their normal schedule.
Subprocessors
These outside companies (called subprocessors) help us run LessRounds. This is the full list.
| Service | What for | Where |
|---|---|---|
| Google Cloud | Application servers, database, background tasks and secure storage of system keys and passwords | India (Mumbai region) |
| Cloudflare | Website hosting and delivery; storage of interview recordings and uploaded documents | Global network |
| OpenAI | Runs the spoken AI interview, transcription, scoring and question drafting | United States |
| Redis Cloud | Sign-in sessions, one-time codes and the progress of interviews happening right now | Cloud region, available on request |
| Resend | Sends sign-in code emails, and the emails companies send their candidates from LessRounds | United States |
| HyperDX | Error and performance monitoring | United States |
Full details, including what data each one handles, are on the subprocessors page.
Not yet. These are formal security certifications, and we’d rather tell you we don’t have them than imply otherwise. The controls on this page are what we run today. If your security review needs more detail, ask us.
OpenAI’s policy is that data sent through its API isn’t used to train its models unless the customer opts in. We haven’t opted in.
Up to 3 years, or less if you ask us to delete it sooner. Candidates can ask you, or us, for their data to be deleted.
Yes. Our Data Processing Addendum sets out how we handle personal data for you. It applies automatically when you use LessRounds. If you need a signed copy, email us.
Email support@lessrounds.ai with “Security” in the subject. A person reads every report. When testing, please use only your own account and never other companies’ data.
Start with 100 free credits, enough for about 20 interviews. No credit card or sales call needed.