Legal

Security

Last updated August 2026

Our approach

JobEarly handles resumes, job search history, and outreach email content — data people reasonably expect to stay private during a job hunt. Security controls are built around that assumption.

Encryption

Data is encrypted in transit (TLS) and at rest. Access to production data is limited to the services that need it to fulfil your requests.

Compliance

SOC 2 Type II audit completed Q1 2026, covering security, availability, and confidentiality controls.

Account access

Gmail integration uses OAuth with the minimum scopes needed (read + send) — we never see or store your Gmail password, and you can revoke access at any time from your Google Account settings.

Reporting a vulnerability

Found a security issue? Email jobearlyteam@gmail.com with details — we take reports seriously and will respond as quickly as we can.