Your Data Security is Our Priority

Hirvex employs enterprise-grade security measures to protect your hiring data and candidate information. Our infrastructure is hosted on USA-based cloud providers with industry-leading security standards.

Security Overview

At Hirvex, security is not an afterthought—it is built into every aspect of our platform. As a product of Maral Amiree IT Services Afghanistan and Maral Amiree LLC USA, we understand the critical importance of protecting sensitive hiring data and maintaining the trust of our users.

Our platform processes thousands of resumes and candidate profiles daily. We are committed to ensuring this data remains secure, private, and accessible only to authorized users.

Our Security Pillars

Encryption

  • • TLS 1.3 for all data in transit
  • • AES-256 encryption for data at rest
  • • End-to-end encrypted communications
  • • Secure key management systems

Infrastructure

  • • USA-based cloud providers
  • • SOC 2 Type II certified data centers
  • • 99.9% uptime SLA
  • • Redundant systems and backups

Access Control

  • • Role-based access control (RBAC)
  • • Multi-factor authentication (MFA)
  • • Single Sign-On (SSO) support
  • • Session management and timeout

Data Protection

  • • Automated daily backups
  • • Point-in-time recovery
  • • Data retention policies
  • • Secure data deletion

Compliance & Standards

Hirvex is committed to maintaining compliance with international data protection regulations and industry standards:

  • GDPR Compliance: We provide tools and processes to support GDPR requirements including data access, portability, and deletion requests.
  • Data Processing Agreements: We execute Data Processing Agreements (DPAs) with our customers to ensure proper handling of personal data.
  • Regular Audits: Our systems undergo regular security audits and penetration testing by third-party security firms.
  • Privacy by Design: Privacy considerations are integrated into our product development lifecycle.

Infrastructure Details

Hirvex is developed and maintained by Maral Amiree IT Services Afghanistan and Maral Amiree LLC USA. Our infrastructure is strategically designed to provide global availability with localized performance:

  • Primary Infrastructure: Hosted on USA-based cloud providers with enterprise-grade security certifications
  • Development: Maral Amiree IT Services Afghanistan, registered in Kabul, Afghanistan
  • Legal Entity: Maral Amiree LLC USA for US operations and compliance
  • Data Residency: Customer data is stored according to regional requirements and preferences

Our Security Practices

Application Security

  • Regular security code reviews and static analysis
  • OWASP Top 10 protection measures
  • Input validation and sanitization
  • Protection against SQL injection, XSS, and CSRF attacks
  • Secure API authentication and rate limiting

AI and Data Processing

  • AI models do not retain or learn from customer-specific data
  • Candidate data is processed securely for matching purposes only
  • No data sharing with third-party AI providers for training
  • All AI processing occurs within our secure infrastructure

Incident Response

  • 24/7 security monitoring and alerting
  • Defined incident response procedures
  • Customer notification protocols for security incidents
  • Regular disaster recovery drills

Employee Security

  • Background checks for all employees
  • Mandatory security training
  • Principle of least privilege access
  • Confidentiality agreements

Security Certifications

SOC 2 Type II
ISO 27001
GDPR Compliant
SSL/TLS Certified
Penetration Tested
Regular Security Audits

Vulnerability Disclosure

We encourage responsible security research and welcome reports of security vulnerabilities. If you believe you have discovered a security issue in our platform, please contact us immediately.

How to Report

Please send vulnerability reports to: legal@maral.af

Include detailed information about the vulnerability, steps to reproduce, and any potential impact. We are committed to addressing all legitimate reports promptly.

Security Contact

For security-related inquiries or to report a security concern, please contact our security team:

Maral Amiree IT Services Afghanistan

Between Sarsabi and Taimani Square, Taimani

District 4th, Kabul, Afghanistan

Email: legal@maral.af

Phone: +93 79 926 5005