🏢 Enterprise · RFP Ready

Enterprise Security Overview

InnoHire.ai's security architecture, controls, and compliance posture — ready for RFPs, vendor onboarding, and government IT procurement.

🔐 Encrypted in transit & at rest🌍 GDPR · CCPA · EEOC✓ DPA Available

Request Custom RFP Response

🛡️

Company

Innochase, Inc. — InnoHire.ai Platform

InnoHire.ai is an AI-powered recruitment intelligence platform providing resume analysis, skill matching, interview generation, transcript analysis, and sourcing tools. This document summarizes our security architecture, controls, and compliance posture for enterprise, government, and regulated industry customers.

GDPR ReadyCCPA AlignedDPA AvailableEEOC CompliantSOC2-In ProgressNYC Law 144

🔐

Data Encryption

TLS 1.2/1.3 encryption for all data in transit
AES-256 encryption for data at rest
End-to-end encrypted API communications

🏗️

Infrastructure & Hosting

On-premise cloud hosting — Innochase Data Center, Chesterton, IN USA
Isolated customer environments with logical data separation
Redundant infrastructure with automated failover

👤

Access Controls

Role-Based Access Control (RBAC) enforced across all services
Principle of least-privilege applied to all internal access
Multi-factor authentication support for administrator accounts
Session timeout and automatic credential expiry policies

🔍

Audit & Logging

Comprehensive audit logs for all user actions and data access
Centralized log management with anomaly alerting
Logs retained per customer contractual and regulatory requirements

🤖

AI / Data Processing

Candidate data processed only for contracted service delivery
No training of shared AI models on customer-uploaded data
OpenAI Zero-Data Retention option available for enterprise contracts
Job descriptions and resumes processed in ephemeral contexts

🌍

Compliance & Regulatory

GDPR — Standard Contractual Clauses (SCCs) for EU data transfers
CCPA / CPRA — California Consumer Privacy Act aligned
EEOC / Title VII / ADA / ADEA — Equal employment guidelines
NYC Local Law 144 — Automated employment decision transparency
EU AI Act — High-risk AI system transparency alignment

📋

Vendor & Subprocessor Management

Data Processing Agreements (DPAs) with all subprocessors
Subprocessor list published at innohire.ai/subprocessors
Enterprise customers notified of material subprocessor changes
Vendors assessed for SOC 2, ISO 27001, or equivalent certifications

🚨

Incident Response

Defined incident response plan with escalation procedures
Data breach notification within 72 hours per GDPR requirements
Dedicated security contact: innochase.usa@gmail.com

🔄

Business Continuity

Regular automated backups with tested restoration procedures
Business Continuity Plan (BCP) documented and reviewed annually
Recovery Time Objective (RTO) and Recovery Point Objective (RPO) defined per tier

🚫

Data Retention & Deletion

Customer data deleted within 30 days of account termination
Candidate data retention configurable per customer policy
Customer-initiated data deletion available on request
No data sold to third parties — ever

📎

Attach this document to:

State RFP ResponsesEnterprise Vendor OnboardingSecurity QuestionnairesGovernment IT ProcurementISO 27001 AuditsGDPR Article 30 Records

Security & Compliance Contact

innochase.usa@gmail.com

Innochase, Inc. · 250 E Pearson Street, Chicago, IL 60611 · Version 1.0 · Feb 2026

📧 Custom RFP

⚖️ Trust & Compliance 🔒 Privacy Policy 🔗 Subprocessors 📄 Terms of Service 🏠 Home

Enterprise Security Overview

InnoHire.ai — Enterprise Security Overview

InnoHire Assistant