Security
Credential documents are sensitive, and staffing agencies are trusting us with their workers' information. Here is exactly how that trust is handled — only claims backed by what is actually built.
Your data is isolated
Every record carries your agency’s identity, and isolation is enforced in two independent layers: authorization checks in the application on every request, and row-level security in the database itself. Even a bug in one layer leaves the other standing. These controls are exercised by automated tests on every change.
Documents are private by default
Uploaded credentials live in private storage with no public URLs. Reviewers access them through links that expire after ten minutes. Upload links sent to workers expire after seven days, can be revoked at any time, and are stored only as one-way hashes — nobody at ClearToFill can read a live link out of the database.
Encryption
All traffic is encrypted in transit with TLS. Data is encrypted at rest by our hosting provider, and third-party integration credentials are additionally encrypted at the application layer with AES-256-GCM under keys that are never stored alongside the data, with support for rotation.
People decide, not software
Documents are read automatically to save your team typing, but automatic reading is an observation only. A person at your agency accepts or rejects every document before a worker’s status changes, and every decision records who made it and when.
Everything is auditable
Imports, document requests, uploads, reviews, and status changes are written to an append-only audit trail — enforced by the database, so history cannot be edited, by anyone, including us.
Your data is yours
Export everything self-service, any time, in CSV: workers, facilities, credentials, shifts, actions, and activity history. When you leave, we delete your data on a documented schedule and tell you plainly how backups age out.
When something goes wrong
We operate documented incident response with kill switches that can stop outbound messaging, uploads, or automatic processing immediately, without waiting for a deployment. If an incident affects your data, we tell you the same day — what happened, what it means for you, and what we changed.
What we do not claim
ClearToFill does not currently hold SOC 2, ISO 27001, or HIPAA attestations, and we will not imply otherwise. Credential documents are professional certifications, not medical records. If your agency’s contracts require specific attestations, raise it during the pilot conversation and we will be straight with you about the roadmap.
Questions or reports
Security questions and vulnerability reports: hello@cleartofill.com. Reports are read by a person and answered.