Security and integration

Privacy is part of the signal path.

Candience is designed to connect through a focused webhook-based integration that listens for defined events, such as interview completion in the hiring example, without requiring invasive access to internal databases.

Scoped event integration: Designed to integrate with existing applicant tracking systems through defined event hooks rather than direct database access.
Webhook-based event listening: Listens for specific configured events, such as interview completion, and acts only on those events.
PII-minimized architecture: Designed to minimize candidate PII exposure through secure identifiers and event metadata.
Secure session identifiers: Session-scoped identifiers reduce exposure. Pseudonymized information is not anonymous while a link back to identity remains possible.
Retention and deletion requirements: The architecture supports tenant-specific raw-input retention and controlled erasure. Confirm deletion scheduling, derived-data retention, and operational controls for the agreed deployment.
Workflow-native alerts: Only configured and verified delivery adapters should receive privacy-approved insights. Confirm channel availability during scoping.
Designed for enterprise review: Architecture and posture are intended to support enterprise security review, including a review of access, retention, and operational controls.
Configurable to customer requirements: Designed to support privacy-conscious deployments and customer-specific compliance controls.

Integration shape

A narrow surface, by design.

Candience does not need broad data access to be useful. The product is built around a small set of permitted events and a deterministic intervention model. That narrow surface is part of the security posture, not a limitation of it.

ATS → webhook → Candience

event: interview.completed

scope: approved group and process context

identifiers: session-scoped, PII-minimized

output: configured, privacy-approved destination

retention: scoped and verified before rollout

Bring your security team

Designed to support enterprise security review.

Review implementation evidence with your security and procurement teams. This page describes design principles, not a certification or a completed security assessment. Final data handling depends on customer configuration and applicable compliance requirements. Talk to sales to start a security conversation tied to your environment.