Security and Privacy
A customer-facing overview of how Coco HR hosts your data, secures access, and handles candidate information.
Coco HR handles sensitive hiring data — candidate resumes, recordings, and evaluation results. This page summarises the controls in place and how your data is managed. It is written for customers evaluating the platform; it is not an exhaustive security specification.
Hosting and tenancy
- Cloud hosting. Coco HR runs on Amazon Web Services (AWS).
- Tenant isolation. Each company's data is isolated per tenant. Your jobs, candidates, templates, reports, and recordings are scoped to your company and are not visible to other companies. Partner API keys are company-scoped, so a key only ever accesses its own company's data.
Authentication and access
| Control | Detail |
|---|---|
| Sessions | Dashboard access uses signed JWT tokens. |
| Two-factor authentication | Optional TOTP-based 2FA (authenticator app). |
| Single sign-on | SSO with Google and Microsoft. |
| Password storage | Passwords are hashed with bcrypt — never stored in plain text. |
| Login anomaly detection | Unusual logins are flagged and can trigger an account lock. |
| API authentication | Partner API requests authenticate with a company API key sent as Authorization: ApiKey <key>. Rotating the key immediately invalidates the previous one. See the Partner API reference. |
Data in transit and at rest
- In transit. Traffic to the platform is served over HTTPS (TLS).
- At rest. Candidate recordings, snapshots, and resumes are stored in AWS S3.
- Public forms. Public application and assessment forms can be protected with Cloudflare Turnstile to reduce abuse.
Payments
Payment processing is handled by Stripe. Coco HR does not store card numbers — card data is handled directly by Stripe, a PCI-compliant payment processor.
What data is captured
For a candidate who takes an assessment, Coco HR may store:
| Data | Purpose |
|---|---|
| Resume (and parsed fields) | Screening and populating candidate details. |
| Answers and transcripts | AI scoring and human review. |
| Webcam video, screen recording, snapshots | Integrity review by a recruiter. |
| Anti-cheat telemetry | Advisory integrity signals (see Anti-cheat and proctoring). |
Candidates are informed that they are recorded, and consent is collected before the assessment begins.
Sub-processors
Coco HR relies on a small set of trusted third parties to deliver the service:
| Sub-processor | Used for |
|---|---|
| Amazon Web Services (AWS) | Hosting, S3 storage, SES email delivery. |
| Stripe | Payment processing. |
| OpenAI / Anthropic | AI scoring, question generation, and transcription (default providers). |
| Cloudflare | Turnstile bot protection on public forms. |
| Greenhouse | Optional ATS integration, for customers who connect it. |
If your company brings its own AI model (OpenAI, Anthropic, OpenRouter, Groq, Mistral, or a custom endpoint), assessment content is sent to that provider instead of the platform default. See Responsible AI and fairness.
Transactional email — assessment invites, one-time passcodes, and report notifications — is sent via AWS SES.
Retention and deletion
Your data is managed through your account controls. Company admins can archive and remove jobs, candidates, and related records from the dashboard; deleting a job or applicant removes its associated data. For data-subject requests (for example, a candidate exercising GDPR rights) or bulk deletion beyond the self-service controls, contact support@cocolevio.com.
Reporting a concern
If you believe you've found a security issue or have a privacy question, contact support@cocolevio.com.