Noggin

Security

Candidate data deserves a careful brain.

Authentication, encryption, data isolation, and AI guardrails — what we do today, stated plainly. No badge-wall theater; every claim on this page stays verifiable.

Modern authentication

Google and Microsoft SSO via Clerk — no passwords for us to lose. Per-org enterprise SSO (Okta, Azure AD) is available on the Scale plan as teams grow.

Encrypted everywhere

Data is encrypted in transit (TLS) and at rest. That covers candidate records, notes, messages, and everything else your team puts in a workspace.

Per-org isolation

Every workspace is scoped to its organization. Your candidates, notes, and analytics are yours alone — data never crosses org boundaries.

Human approval gates

AI drafts and screens; people approve. Outreach never sends and submissions never advance without a recruiter's say-so — that's the product design, not a setting.

Your data, literally

Export on request. No hostage clauses.

The data in your workspace belongs to your organization. Ask and we'll provide a full export — candidates, notes, activity — in a portable format. Leaving should be as easy as arriving; we'd rather keep you with the product.

Subprocessors

Who touches your data, and why.

  • ClerkAuthentication and SSO (Google, Microsoft; per-org enterprise connections)
  • VercelApplication hosting and delivery
  • NeonDatabase (Postgres)
  • NylasEmail and calendar sync (Gmail, Outlook, Google Calendar)
  • CoresignalExternal candidate profile data for Discover search
  • AnthropicAI model provider behind Milo's drafting, screening, and reviews

For your vendor review

The two-page version, ready to forward.

Running a security assessment? Grab the overview PDF and send it to whoever asks — it covers everything on this page in the format procurement expects. Questions beyond it, or need a walkthrough for a vendor review? Reach out and we'll get on a call.

Download the security overview (PDF)

overview PDF in production — available at launch

Trust is a feature.

See the approval gates in the product itself — they're on every screen, not just this page.

Google or Microsoft sign-in · no sales call required