Skip to content
Back to Home

Security

Resume Boost System

Last Updated: October 1, 2025

Our Commitment to Security

At Resume Boost System, protecting your personal information and career data is our highest priority. We implement industry-leading security practices to ensure your resumes, job applications, and personal details remain confidential and secure.

Trust Statement

Your resume data is never sold or shared with third parties for marketing purposes. We only share data with service providers necessary to deliver our AI analysis services, and they are contractually bound to protect your information.

Data Encryption

In Transit (TLS/HTTPS)

All data transmitted between your browser and our servers is encrypted using TLS 1.3 (Transport Layer Security), the same technology used by banks and financial institutions. This prevents unauthorized parties from intercepting your resume content or personal information during transmission.

At Rest (AES-256)

Your resumes, job descriptions, and analysis results are stored in encrypted databases using AES-256 encryption. Even if an unauthorized party gained access to our storage systems, your data would be unreadable without the encryption keys.

Authentication & Access Control

  • Secure Password Storage: Passwords are hashed using bcrypt with salt, making them virtually impossible to reverse-engineer. We never store plain-text passwords.
  • JWT Token Authentication: We use JSON Web Tokens (JWT) for secure session management with automatic expiration and refresh mechanisms.
  • Supabase Auth Integration: Our authentication is powered by Supabase, a trusted enterprise-grade authentication provider with built-in security features.
  • Row-Level Security (RLS): Database access is restricted at the row level, ensuring users can only access their own resume data.
  • Session Management: Sessions automatically expire after 24 hours of inactivity, and you can manually log out from all devices at any time.

Infrastructure Security

Secure Hosting

Resume Boost System is hosted on enterprise-grade cloud infrastructure:

  • Vercel: Frontend hosting with automatic DDoS protection
  • Railway: Backend API with isolated container deployment
  • Supabase: PostgreSQL database with built-in security features

Network Security

  • Firewalls and intrusion detection systems
  • DDoS protection and rate limiting (120 requests/minute)
  • Automated security updates and patching
  • Regular vulnerability scanning

File Upload Security

When you upload resume files, we implement multiple layers of security validation:

  • File Type Validation: Only PDF, DOCX, and TXT files are accepted
  • MIME Type Verification: Files are verified beyond just their extension
  • Size Limits: Maximum 5MB per file to prevent abuse
  • Malware Scanning: Files are scanned for malicious content
  • Sanitization: File content is sanitized before processing

AI Processing Security

Your resume content is analyzed primarily using Anthropic's Claude AI. Certain features also use other AI providers (for example, OpenAI for semantic-search embeddings). We've implemented strict security measures for all AI processing:

  • Secure API Communication: All data sent to AI providers is encrypted in transit
  • No Training Data: Your resume content is not used to train AI models
  • Temporary Processing: Resume content is processed ephemerally and not stored permanently by AI providers
  • Contractual Protection: Anthropic is contractually bound to protect your data per our data processing agreement

Compliance & Certifications

GDPR Compliant

We comply with the EU General Data Protection Regulation, giving you control over your personal data with rights to access, correct, and delete information.

SOC 2 Type II

Our infrastructure providers (Supabase, Vercel, Railway) maintain SOC 2 Type II compliance, ensuring enterprise-grade security controls.

Monitoring & Incident Response

24/7 Security Monitoring

We continuously monitor our systems for suspicious activity, unauthorized access attempts, and potential security threats. Automated alerts notify our team of any anomalies for immediate investigation.

Incident Response Plan

In the unlikely event of a security breach, we have a comprehensive incident response plan that includes:

  • Immediate containment and mitigation
  • Forensic investigation to determine scope
  • Notification to affected users within 72 hours (GDPR requirement)
  • Cooperation with law enforcement if necessary
  • Post-incident review and security improvements

Your Security Responsibilities

While we implement robust security measures, you also play a critical role in protecting your account:

  • Use Strong Passwords: Choose unique, complex passwords (minimum 8 characters)
  • Don't Share Credentials: Never share your password or login with others
  • Log Out on Shared Devices: Always log out when using public computers
  • Report Suspicious Activity: Contact us immediately if you notice unauthorized access
  • Keep Software Updated: Use updated browsers and operating systems

Reporting Security Vulnerabilities

We take security vulnerabilities seriously and appreciate responsible disclosure from security researchers and users. If you discover a security issue, please:

🚨 Report Security Issues

Email us at: support@resumebs.com

Please do not publicly disclose vulnerabilities until we've had a chance to address them. We typically respond within 48 hours and aim to resolve critical issues within 7 days.

Security Questions?

If you have questions about our security practices or need assistance with account security:

Resume Boost System

Security and account support: support@resumebs.com