Security and your data
What we store, what we don't, and how to export or delete it.
- Plan
- All plans
- For
- Owner or admin
- Time
- 6 minutes
What RPM Talent stores and what it doesn't
| We store | We never store |
|---|---|
| Contact info, resume, experience and certifications | Social Security numbers or dates of birth (entered on Checkr) |
| Screening answers, assessment results and fit scores | W-4, bank or direct deposit details (entered with ADP or QuickBooks) |
| Interview times, scorecards and notes | Signed offer PDFs (kept by Dropbox Sign) |
| Offer terms, check status, onboarding answers | Criminal record details or I-9 documents |
How it's protected
- All traffic is encrypted with TLS. Data is encrypted at rest with AES-256, and integration credentials get a second layer of AES-256-GCM encryption.
- Every database query is scoped to your shop. Another RPM Talent customer can't see your data, even by guessing an ID.
- Sign-ins are rate limited and sessions end after 30 minutes of inactivity.
- An audit log records sign-ins, candidate views, exports, deletions and setting changes. Admins can review it in Settings, Security & data.
Export or delete data
- Export everything: go to Settings, Security & data (
/app/settings/security) and select Export all data. You get a file with every record RPM Talent holds for your shop. - Delete a candidate: open the candidate, select Delete candidate data and confirm. Their profile, applications, messages and resume are permanently removed. Use this when someone asks you to delete their information.
- Close your account: contact your RPM rep. We delete your shop's data within 30 days of cancellation.
API keys
Admins can create API keys in Settings, Security & data to read jobs, candidates and applications from other tools. A key is shown once when it's created; store it in a password manager. Rotate or revoke a key at any time. Every API request is logged.
Still stuck?
Email us what you were trying to do, with a screenshot if you can. A real person on the RPM team will reply.