Back to landing
Enterprise Security

Security & Data Privacy

Career Agents implements strict local-first security boundaries to protect credentials, candidate privacy, and developer environments.

Local SQLite Sandboxing

Candidate data, resumes, and interview transcripts run directly inside local browser storage without involuntary cloud uploads.

Zero-Retention LLM Gateways

All LLM queries dispatched to OpenAI, Anthropic, or Gemini use enterprise zero-data-retention headers preventing training ingestion.

Local Secret Key Isolation

Your personal provider API keys stay stored securely in your browser session and are never logged or proxied to external third parties.

SSRF & Injection Hardening

Our MCP tool router strictly validates input schemas and limits URL fetching to verified domain allowlists.