설계부터 내재화된 보안과 개인정보 보호.
데이터 보호, 법적 규정 준수, 신원 안전에 대한 완벽한 신뢰가 있을 때만 올바른 채용이 이루어집니다.
GDPR & APPI Compliant
Full adherence to European General Data Protection Regulation (GDPR) and Japanese Act on the Protection of Personal Information (APPI). Explicit consent models for candidate data processing.
Zero data-selling guarantee
We never monetize, broker, or sell candidate resumes, contact details, or hiring telemetry to third-party data brokers or marketing agencies. Period.
EU-based infrastructure
Primary data storage and application workloads run in secure European cloud facilities (Frankfurt, Germany) with ISO 27001, SOC 2 Type II, and PCI-DSS compliance.
Encrypted at rest & in transit
All web traffic is forced over TLS 1.3 with HSTS. All database volumes, backups, and resume uploads are encrypted at rest using AES-256 standards.
Domain shielding & privacy controls
Candidates can block current employers by email domain. Identity markers remain completely hidden until candidates explicitly opt in to an intro.
Passkey & passwordless auth
Secure authentication powered by modern WebAuthn passkeys and cryptographic magic links, eliminating credential stuffing and phishing vectors.
인프라 및 하위 처리업체
Katara는 SOC 2 Type II 및 ISO 27001 인증을 획득한 엔터프라이즈 클라우드 파트너만을 이용합니다.
DigitalOcean & Frankfurt cloud (EU)
ISO 27001, SOC 2 Type II, Frankfurt, Germany.
Stripe payments
PCI-DSS Level 1 Service Provider.
Postmark (EU servers)
SOC 2 Type II, GDPR Data Processing Addendum.
보안 설문지나 공급업체 감사가 필요하신가요?
저희 보안 및 컴플라이언스 팀이 영업일 기준 2일 이내에 답변드립니다.