Security
Last updated: 2 October 2026
How AuraHR protects the data that companies and candidates trust it with. This page describes what is in place today; it is not a certification.
Where the data lives
The application, the database and the live audio and video service run on servers in Germany. Recordings, CVs and database backups are kept in storage restricted to the European Union.
Encryption
Every connection uses TLS, including the connections between our own servers and the database. Recordings and CVs are encrypted in storage, and database backups are encrypted before they leave the server.
Access
Each company’s data is separated in the database, so one workspace cannot read another’s. Recruiters sign in with a one-time email code or with their Google or Microsoft account. AuraHR staff access is limited to the people who need it.
Audit log
Actions on candidate data, by recruiters and by AuraHR staff, are written to an audit log.
Backups
The database is backed up every day with continuous archiving in between, and an independent second copy is taken daily. Backups are kept for at least 14 days.
Deletion
Candidate data is deleted automatically 24 months after the candidate’s last activity, and within minutes when a company deletes the vacancy.
Reporting a problem
If you find a security problem, write to privacy@aurahr.ge.