Candidate data deserves clinical-grade care.
XPdoc holds physicians' careers in trust — CVs, credentials, interview notes. This page describes, plainly and without badges, how that data is protected today.
Data protection
- All traffic is encrypted in transit with TLS 1.2 or higher.
- Data is encrypted at rest in our database (Neon) and file storage (Cloudflare R2).
- Every record is scoped to your organization. Queries are isolated per organization at the application layer, so one customer's data is never visible to another.
- Sharing anything that contains candidate information — CVs, interview packets, action boards — requires a per-recipient invite locked to a verified email address.
Access control
- Authentication is handled by Clerk, including session management and sign-in security.
- Shared links follow least privilege: recipients see only the sections the sender explicitly enabled, and unshared sections are withheld server-side.
- Every share is revocable per recipient, at any time, without affecting other recipients.
Monitoring
- Errors and performance regressions are tracked with Sentry across the browser and server.
- Significant actions — record changes, shares, verdicts, stage moves — are written to an activity log scoped to your organization.
- Automated checks run in the background, including scheduled cleanup of expired interview audio.
Email authentication
- SPF and DMARC are live on our sending domain, so email that claims to come from XPdoc can be verified by receiving servers.
- Transactional email is delivered through Postmark from an authenticated domain.
Subprocessors
These services process data on our behalf. Each is used for the single purpose listed. Services marked “Not yet active” are integrated but do not receive any data today; they turn on only after their prerequisites are met, and this page will say so.
| Service | Purpose | Region | Status |
|---|---|---|---|
| Vercel | Application hosting and delivery | United States | Active |
| Neon | PostgreSQL database | United States | Active |
| Cloudflare R2 | File storage (CVs, documents, interview audio) | United States | Active |
| Clerk | Authentication and user management | United States | Active |
| Postmark | Transactional email delivery | United States | Active |
| Google Gemini | Document and text processing | United States | Active |
| Google Workspace | Business email | United States | Active |
| Sentry | Error and performance monitoring | United States | Active |
| Deepgram | Interview transcription | United States | Not yet active |
| Stripe | Subscription billing | United States | Not yet active |
Compliance
A SOC 2 readiness program is underway. We collect and review control evidence on a recurring basis — repository protections, dependency health, tenancy isolation, email authentication, and security headers. We will update this page as the program progresses; until an independent audit is complete, we make no certification claims.
Responsible disclosure
Found a vulnerability? We want to hear about it. Email ziad@xpdoc.com with the details and steps to reproduce, and we will respond as quickly as we can. Please give us a reasonable window to fix the issue before sharing it publicly. Machine-readable contact details live at /.well-known/security.txt.