Security & Encryption
How IT Connect protects candidate confidentiality, enforces 256-bit encryption, deploys passwordless OTP verification, and shields agency bench talent.
256-Bit Cryptography
All communications operate via TLS 1.3 in-transit, paired with AES-256 database volume and document encryption at-rest.
Passwordless OTP Auth
Eliminates credential stuffing, reused password breaches, and phishing attacks through cryptographic single-use verification.
Role-Based RBAC
Strict isolation boundaries between Candidate, Employer, Staffing Agency, and Superadmin privilege planes.
Watermarked Protection
Automated sanitization and dynamic watermark engines prevent unauthorized candidate scraping and recruiter harvesting.
1. Enterprise Infrastructure & Defense-in-Depth
IT Connect employs a modern defense-in-depth security model across every layer of the recruitment tech stack. From application frontends and API endpoints to relational storage clusters, all system components are architected to ensure data confidentiality, transactional integrity, and continuous availability.
Infrastructure is hosted within Tier-IV ISO 27001, SOC 2 Type II, and PCI-DSS compliant cloud data centers featuring automated geographical failover, redundant power grids, and hardware security modules (HSMs).
2. Cryptographic Encryption Standards
We enforce modern cryptographic standards across all state vectors:
In-Transit Encryption (TLS 1.3)
All web traffic, API requests, and webhook transmissions require HTTPS enforced via HTTP Strict Transport Security (HSTS). We utilize TLS 1.3 with forward secrecy ciphers (ECDHE-RSA-AES256-GCM-SHA384) to eliminate eavesdropping risks.
At-Rest Encryption (AES-256)
Relational databases, transaction logs, and cloud storage volumes storing candidate resumes and employer KYC filings are encrypted using hardware-accelerated Advanced Encryption Standard (AES-256) with automated cryptographic key rotation.
3. Passwordless OTP Authentication & Session Hardening
Traditional password models represent the single largest vector for account takeovers. IT Connect implements a passwordless, cryptographic One-Time Password (OTP) verification framework:
Cryptographic Time-Sensitive OTP Safeguards
- 6-digit verification codes generated via cryptographically secure pseudo-random number generators (CSPRNG).
- Strict five (5) minute time-to-live (TTL) expiration window per OTP issuance.
- Server-side rate-limiting enforced on OTP dispatch and validation attempts to prevent brute-force attacks.
- Cryptographic session tokens stored in secure, HttpOnly, SameSite cookies preventing cross-site scripting (XSS) extraction.
4. Dynamic Document Sanitization & Resume Watermarking
A core security differentiator of the IT Connect platform is our automated resume sanitization and dynamic watermarking engine:
- Agency Bench Contact Shielding: When staffing agencies upload consultant profiles to the C2C Bench Network, direct phone numbers, personal email addresses, and residential coordinates are sanitized automatically to prevent unauthorized client bypass.
- Dynamic Watermarking: Watermarked PDF resumes generated by the platform feature embedded cryptographic timestamps and agency authorization markers, preventing competitor re-brokering and proving provenance.
- Malware & File Inspection: All uploaded resume documents (PDF, DOCX) undergo automated scanning for embedded malicious macros, malicious payloads, and MIME-type integrity checks before processing.
5. Network Defense, Rate Limiting & Anti-Scraping
Our API edge layers deploy multi-tiered rate limiting and Web Application Firewall (WAF) rule sets to neutralize malicious traffic:
Throttles automated request bursts, preventing dictionary attacks and computational denial-of-service attempts.
Behavioral heuristics identify and neutralize headless browser scrapers and unauthorized candidate harvest bots.
Strict Prisma ORM parameterized queries and sanitized input sanitizers eliminate database injection exploits.
Multi-gigabit edge mitigation absorbs volumetric layer-3 and layer-4 distributed denial-of-service attacks.
6. Role-Based Access Control (RBAC) & Audit Trails
Access to platform services is strictly mediated through granular Role-Based Access Control (RBAC):
Least Privilege Principle: Employers only access candidate records submitted to their specific vacancies. Staffing agencies only manage candidates within their authorized bench roster. Candidates only access their personal profiles and active application stages.
Immutable Audit Logging: Administrative actions, company KYC approvals, job postings, and critical profile state transitions are recorded into an append-only forensic audit trail capturing actor UUIDs, timestamps, IP addresses, and event payloads.
7. Backup, Disaster Recovery & High Availability
We maintain point-in-time database snapshot recovery with continuous replication across redundant geographic availability zones.
Our Disaster Recovery (DR) plan targets a Recovery Point Objective (RPO) of under five (5) minutes and a Recovery Time Objective (RTO) of under one (1) hour in the event of an extraordinary regional infrastructure failure.
8. Responsible Vulnerability Disclosure
IT Connect welcomes constructive security research and bug reports from the cybersecurity community. If you identify a potential security vulnerability, we ask that you adhere to responsible disclosure principles:
Security Operations Desk: IT Connect Cyber Defense Unit
Direct Security Email: security@itconnect.in (or contact@itconnect.in)
Response SLA: Initial vulnerability triage acknowledgment within twenty-four (24) hours
Guidelines: Please do not access or modify real user data, execute disruptive denial-of-service tests, or publish vulnerabilities prior to coordinated remediation.