Operators trust us with their careers and organizations with their workforce data. Here's how we protect it.
All traffic is served over HTTPS/TLS. Authentication tokens are kept in secure, HttpOnly cookies — never exposed to page scripts.
Passwords are stored using one-way hashing. We never store plaintext passwords, and we never see your card number — payments run through a PCI-compliant provider.
Operators, organization admins, and platform admins each see only what they should. Cross-organization access is blocked at the API layer.
Rate limiting on sensitive endpoints and CSRF protection on state-changing requests guard against brute-force and cross-site attacks.
Built on managed, reputable cloud infrastructure with isolated environments for testing and production.
Your records are yours. Request an export or deletion anytime — and your career history follows you across employers.
Found a security issue? We appreciate responsible disclosure. Please email support@philantrac.com rather than sharing it publicly.
Read our Privacy Policy