Security

Your candidates' data stays yours.

Privacy is a default, not an upgrade.

True blind screening

Every candidate is fully anonymized before the AI evaluates a single line. Names, contact details, school names, and identifying links are stripped completely.

Encrypted in transit and at rest

All data is encrypted using TLS during transmission and AES-256 encryption at rest in storage. Candidate files are never exposed in plaintext outside the screening pipeline.

Never used to train AI

Candidate data is never used to train, fine-tune, or improve any AI model. Your data is processed, delivered, and deleted. It is not retained for any secondary purpose.

Short-lived by design

JAN Standard retains data for 24 hours, then permanently deletes it. JAN Enterprise retains data for 14 days, then permanently deletes everything. No archive, no backup retention, no way to recover data after deletion.

EEOC compliance

Compliance checks run at multiple layers of every evaluation to ensure screening criteria and results align with equal employment opportunity standards.

No analytics on screening pages

JAN does not run analytics tracking while you are screening candidates or reviewing results. Analytics are limited to public marketing pages only.

Infrastructure

US-hosted on SOC 2 Type II certified cloud

All data is hosted on Render, a SOC 2 Type II certified cloud platform. Single-admin access with no team-wide data exposure.

Screening powered by Anthropic

Candidate data is sent to Anthropic's API for evaluation and returned. It is never stored by Anthropic and never used to train models.

Authentication powered by Clerk

Enterprise-grade identity infrastructure for secure sign-in, session tokens, and account protection.

Agent access (MCP)

Authorized software agents authenticate through Clerk OAuth and can access Enterprise screening results for the duration they are available. Agents can save screening criteria but cannot initiate screenings. Every agent action is permanently recorded in an audit log. You control which agents you authorize and are responsible for data after retrieval.

Need the full picture? Our Data Processing Agreement covers subprocessors, retention, and compliance obligations.

FAQ

Questions before you start.

Where is my data hosted?

All candidate data is hosted in the United States on Render, a SOC 2 Type II certified cloud platform.

Who can access my screening data?

Only you. Screening data is scoped to your authenticated account and is not accessible to other customers. JAN has a single administrator and no shared staff access to customer data.

Does JAN use my data to train AI?

No. Candidate data is sent to Anthropic's API for evaluation and returned. It is never stored by Anthropic, and never used to train, fine-tune, or improve any model.

How does blind screening work?

Before the AI evaluates a single line, all personally identifying information is removed from the resume text, including names, contact details, school names, and identifying links. Candidate identity is reattached only after scoring is complete.

What happens to my data if I cancel?

Canceling does not change the deletion schedule. Standard data is available for 24 hours after screening, Enterprise data for 14 days. After that, everything is permanently deleted. There is no archive and no way to recover data after deletion.

Is JAN SOC 2 certified?

JAN's hosting infrastructure (Render) and authentication provider (Clerk) are both SOC 2 Type II certified, meaning their security controls have been independently audited.

Do you have a Data Processing Agreement?

Yes. JAN's Data Processing Agreement covers data handling roles, subprocessors, retention schedules, security measures, and breach notification. It is available to all customers.

Can third-party tools access my screening data?

Only if you explicitly authorize them. JAN's MCP server allows Enterprise customers to connect software agents that can retrieve screening results and save screening criteria. Agents authenticate through Clerk OAuth, cannot initiate screenings, and every action is permanently recorded in an audit log. You control which agents have access.

Put it to the test.

Set your criteria. See the evidence. Decide for yourself.