Trust center
Last updated 8 October 2026
Resurface scores resumes against a job and quotes the resume line behind every answer. This page shows where that data goes, what we keep and how we protect it. Our Data Processing Addendum and the subprocessors list are public. For a signed copy, a security questionnaire or anything else your vendor review needs, email office@bulldog-adv.com.
In short
- Resumes are read in memory. We don't store the file or its full text, and our scoring model provider deletes it as soon as it answers.
- Resume text goes to one scoring model, with one fallback. Anthropic never receives resumes.
- The application and the database run in the US East region.
- Resurface returns a score and its evidence. It never rejects a candidate; people decide.
How a resume is processed
- Your app sends the job and the resume over HTTPS, with your API key or your Resurface sign-in.
- The first time we see a job, Anthropic's Claude drafts its screening questions. We save them as a rubric, so the next resumes for that job reuse it.
- We extract the resume text in memory. The file and the full text are not written to our database or our logs.
- The text and the questions go to the scoring model: TypeSafe's Jev, or Cloudflare Workers AI if TypeSafe is unavailable.
- We save the result (the score, a verdict per question and the short resume lines quoted as evidence) with a one-way hash of the resume, used to spot repeats. The result goes back to your app.
Who processes data for us
Each name links to that provider's security or privacy page. When this list changes, we update this page and its date. The same list is in our privacy policy, and the subprocessors page adds each one's legal entity and location.
What we store, and for how long
- Account: your email and name.
- Rubrics: job descriptions and their screening questions.
- Results: the score, a verdict per question, the quoted evidence lines and a one-way hash of the resume.
- Usage records: time, key used, latency and billing, to count free scores and bill usage.
- Payments: the order, your email and the amount. Never card details.
Everything stays in your account until you ask us to delete it or close the account. Email us and we delete the account and everything linked to it.
Where data lives
The application runs on Vercel in US East (Washington, D.C.). The database runs on Neon in AWS us-east-1 (Northern Virginia). The model providers above process requests on their own infrastructure.
How we protect it
- All traffic uses HTTPS, with HSTS on every page.
- The database is encrypted at rest (AES-256), and Neon keeps daily encrypted backups.
- API keys are stored only as SHA-256 hashes. A key is shown once, when you create it, and you can revoke it from the dashboard at any time.
- Claude and other MCP clients connect through OAuth with PKCE, run by Clerk. They never see your password.
- Every admin account at our providers uses multi-factor authentication.
- Each developer has rate limits on scoring and on drafting questions.
- Our logs record errors, not request bodies or resume text.
Responsible use
Every verdict quotes the resume line it rests on, so a person can check it. INSUFFICIENT_EVIDENCE means the resume doesn't say, not that the candidate fails. Resurface answers only the screening questions for the job and returns no reject decision. You remain responsible for having the right to send the resumes you submit and for telling candidates how their data is processed. More in Using Resurface in hiring.
Certifications
Resurface is not SOC 2 or ISO 27001 certified yet. SOC 2 is on our roadmap, and we will list it here when the audit is done. Most of the providers above publish their own compliance reports on the linked pages.
Contact and security reports
Security questions, a signed DPA, a completed questionnaire, or a vulnerability report: office@bulldog-adv.com.