Infrastructure & Data Protection

Security Practices

Manuel Careers implements defense-in-depth architecture to secure candidate academic records, resumes, employer hiring pipelines, and financial transactions against unauthorized access and cyber threats.

Last updated: January 2026[email protected]

Key Summary: All data in transit is encrypted using TLS 1.3, and sensitive databases and resume archives are encrypted at rest with AES-256. Multi-Factor Authentication (MFA) and granular role-based access control are enforced.

1. Encryption Architecture

Data in Transit

All communication between clients, mobile devices, and servers is strictly encrypted via HTTPS and TLS 1.3 with modern cipher suites and HSTS enforcement.

Data at Rest

PostgreSQL databases, Redis cache layers, and object storage files (CVs, transcripts) are encrypted at rest using industry-standard AES-256 encryption.

2. Authentication & Credential Protection

Password Hashing: Passwords are cryptographically salted and hashed using Argon2id with memory-hard work factors. Passwords are never stored in plain text.
Multi-Factor Authentication (MFA): TOTP-based two-factor authentication is supported for candidates and mandatory for administrative accounts.
Session Management: Ephemeral JWT tokens with automatic expiration, session version revocation, and secure cookie transport flags.

3. Responsible Disclosure & Vulnerability Reporting

We welcome security researchers and community members to report potential vulnerabilities. If you discover a security issue or bug, please report it responsibly:

Manuel Solutions Security Engineering Team

Email: [email protected]

Please allow 48 hours for initial triage before public disclosure.