Our Commitment to Data Sovereignty
Aigis is built on the principle that your career data belongs to you. We are a Sovereign Candidate Platform — meaning you control who can access your AI Twin, for how long, and you can revoke access or delete your data at any time.
What Data We Collect
- Account data: Your email address, used for authentication via magic links.
- Profile data: Name, professional role, skills, experience, and projects you provide.
- Documents: Resumes, portfolios, and other files you upload to train your AI Twin.
- Usage data: Access logs showing when and how your share links are used (visible to you on your dashboard).
- Hiring activity data: If you use the hiring features, we record which candidate CVs you view and when — this access log supports candidates' data-protection rights and is deleted with the CV data it relates to.
How We Store Your Data
- All candidate content (documents, transcripts, journals, profiles) is encrypted at rest using AES-128-CBC via Fernet. Encryption keys are managed at the application layer and never exist on the database server.
- Personal information such as email addresses uses hash-based lookups — the database stores only encrypted values and SHA-256 hashes, never plaintext.
- Authentication tokens are stored as one-way SHA-256 hashes, never in plaintext.
- Uploaded files are encrypted before writing to disk.
- All connections use PostgreSQL with encrypted transport (TLS).
- Railway provides additional disk-level encryption as a baseline layer.
How We Use Your Data
Your data is used exclusively to power your AI Twin. We do not:
- Sell your data to third parties.
- Use your data to train AI models beyond your own Twin.
- Share your profile with anyone you haven't explicitly granted access to.
AI Features, Automated Decision Support & Profiling
Aigis is an AI product, and we're explicit about where AI evaluates or profiles people:
- Your AI Twin generates responses grounded in your own uploaded content. Anyone who chats with it is told they are interacting with an AI system.
- Candidate-side profiling (your Aigis Bio, Skill Radar, readiness score, interview feedback) is AI analysis of your own content, produced for you, editable or deletable by you, and shared only when you choose.
- Hiring-manager screening (CV triage, batch assessment) uses AI to score candidate CVs against job criteria. These scores are decision support, never decisions: the system cannot reject a candidate automatically, every scoring output carries evidence citations for human review, and rejection always requires an explicit human action. Hiring managers are contractually required to maintain meaningful human review and to inform candidates that AI is used. See our AI transparency page for a plain-language description of how the screening logic works.
CVs Uploaded by Hiring Managers
If a hiring manager uploads your CV to Aigis's screening tools, the hiring manager is the data controller for that processing and Aigis acts as their processor under our Data Processing Addendum. In that case:
- Your CV is used only to assess you against the specific job's criteria, on the hiring manager's instructions. It is encrypted at rest and never used to train AI models.
- Retention is limited: CV data is automatically and permanently deleted 28 days after last activity on it, with a hard maximum of 180 days — file, extracted text, AI scores, and search index entries included.
- Your rights (access, correction, erasure, objection to AI-assisted processing) are exercised against the hiring manager who uploaded your CV, since they control the purpose of the processing — but you can also contact us at hello@aigis.bio and we will act on verified requests with them, or delete data where we are able to act directly.
Your Rights
- Access: View all data we hold about you on your dashboard.
- Portability: Download your profile and documents at any time.
- Deletion: Permanently delete all your data or your entire account from Settings > Account. Deletion is immediate in all live systems — database, search index, and file storage. For disaster recovery we keep short-lived encrypted infrastructure backups; deleted data ages out of these automatically (daily backups within days, the longest-lived within three months) and backups are only ever used to restore service after a failure, never to resurrect deleted data.
- Revocation: Revoke any share link or connected agent access instantly.
These reflect your GDPR rights of access, portability, erasure, and objection. If you believe we haven't met them, contact us at hello@aigis.bio — and you always have the right to complain to your data protection authority.
Third-Party Services
We use the following services to operate Aigis:
- Google Gemini: AI model powering your Twin's responses (your queries are processed but not stored by Google for training).
- Resend: Email delivery for magic link authentication.
- Railway: Infrastructure hosting.