How Recruitly protects your agency's data, layer by layer
Cloudflare in front, compulsory two-factor sign-in, zero trust inside, live copies in Finland and Germany that never leave the EU, undeletable backups in Frankfurt and checks every two minutes.
Ask AI about this
Emma walks through how Recruitly protects your data from the outside in, and how our AI keeps every layer running.
Watch it on Recruitly Play (3 min 26 s).
At the edge and the door
- Every request passes through Cloudflare first, which stops bots, floods of fake traffic and known attacks. Attack mode makes every visitor prove they are human.
- Every user signs in with a password and a code from their phone, with no off switch. Five wrong codes lock the account.
Inside
- Nothing is trusted by default. Servers are not on the open internet and nobody works on them by hand.
- Our AI, built on Claude, runs them from a written runbook for every job, with engineers approving what it does.
- The AI holds no keys. It fetches each from a locked vault that records every fetch, and maintenance keys only work from our private VPN.
Copies and backups
- Data runs live in Finland and Germany and never leaves the EU. If one data centre goes down, the other takes over within seconds, and a third copy follows on a separate account.
- Every change streams to Amazon in Frankfurt, so data can be restored to any second in the last thirty days. Each backup is locked for fourteen days so nobody can delete it.
- CVs and documents are copied on upload to a second Amazon account that keeps them even if deleted.
Watching and changing safely
Every part of Recruitly is checked every two minutes from inside and outside. If it is down for more than five minutes, every user is emailed, and again when it is back. Support access to your account needs a senior second approval, ends within the hour and is recorded. AI tools you connect sign in as you and can only read until your admin allows more. Every code change is reviewed and scanned for leaked keys, and updates go out beside the old version so you are never taken offline.
See security infrastructure, secure migration and GDPR.
Where is Recruitly data stored?
Live in data centres in Finland and Germany, with backups at Amazon in Frankfurt. It never leaves the EU.
Can backups be deleted?
No. Each backup is locked for fourteen days so nobody, including Recruitly, can delete it.