Candidate Data Security

Your data is protected by design

Everything we collect, why we collect it, and exactly how it's kept safe.

Our security commitments

Four principles that govern how we handle every piece of your personal information.

Encrypt everything

Sensitive fields are encrypted at rest and in transit, always.

Minimum access

Only the staff roles that must see your data can access it.

Full audit trail

Every data access is logged with timestamp and user identity.

No third-party sales

Your data is never sold or shared without your explicit consent.

Your SSN is encrypted from the moment you submit it

We use AES-256 encryption to store your Social Security Number. It is never stored as plain text, never displayed in full after entry, and is visible only to credentialed compliance staff — not recruiters, supervisors, or facility contacts.

Your SSN is not collected at registration. It is only requested at the background check and employment verification stage — after you have a conditional offer.
Once submitted, your SSN displays only as ***-**-XXXX everywhere in the platform. No staff member sees the full number on screen.
Your SSN is used solely for E-Verify and background check processing as required by federal employment law.
Every time your SSN record is accessed by any staff user, that access is automatically logged with the user's identity, role, and timestamp.
Your SSN is never shared with third parties outside of legally required verification services without your written consent.

Technical safeguards

The infrastructure and engineering controls protecting your data around the clock.

TLS 1.2+ encryption in transit

Role-based access control — recruiters cannot access compliance documents; facility contacts cannot see application history

Secure credential storage — passwords hashed, never stored in readable form

Tenant isolation — candidate data is logically separated across agencies

Enterprise-grade cloud infrastructure with continuous security monitoring

Your rights

You have the following rights regarding your personal data. Contact us at any time to exercise them.

Access

You have the right to request a copy of all personal data we hold about you.

Correction

You can ask us to correct any inaccurate or incomplete information in your record.

Deletion

You may request that your personal data be permanently deleted from our systems.

Portability

You can request your data in a structured, machine-readable format for transfer.

Objection

You may object to the processing of your data for certain purposes at any time.

Withdraw consent

Where processing is based on consent, you can withdraw it at any time without penalty.

Questions about your data?

Email privacy@ventahr.com — our compliance team responds within one business day.