Security at Gilji
Your career data is sensitive. We protect it with enterprise-grade security measures, regular audits, and a commitment to transparency.
Last updated: January 1, 2026
Security Measures
End-to-End Encryption
All data is encrypted using AES-256 encryption both in transit (TLS 1.3) and at rest.
Secure Infrastructure
Hosted on SOC 2 Type II certified cloud infrastructure with 99.99% uptime SLA.
Access Controls
Role-based access control (RBAC) and multi-factor authentication for all accounts.
Continuous Monitoring
24/7 security monitoring, intrusion detection, and automated threat response.
Regular Audits
Annual third-party penetration testing and security audits by certified firms.
Incident Response
Documented incident response procedures with 24-hour breach notification.
Certifications & Compliance
SOC 2 Type II
Independently audited for security, availability, and confidentiality
GDPR
Full compliance with EU General Data Protection Regulation
CCPA
California Consumer Privacy Act compliance
ISO 27001
Information security management system certification
How We Protect Your Data
Application Security
Our application is built with security-first principles:
- Secure coding practices following OWASP guidelines
- Automated security scanning in our CI/CD pipeline
- Regular dependency updates and vulnerability patching
- Input validation and sanitization on all user inputs
- Protection against common attacks (XSS, CSRF, SQL injection)
Data Protection
We implement multiple layers of data protection:
- AES-256 encryption for all stored data
- TLS 1.3 for all data in transit
- Encrypted database backups with geographic redundancy
- Secure key management using HSM
- Data masking and tokenization for sensitive fields
Employee Security
Our team follows strict security protocols:
- Background checks for all employees
- Mandatory security awareness training
- Principle of least privilege access
- Secure device management and endpoint protection
- Regular access reviews and deprovisioning
Vulnerability Disclosure
We welcome responsible disclosure of security vulnerabilities. If you discover a security issue, please report it to security@gilji.com. We commit to acknowledging your report within 24 hours and working with you to understand and resolve the issue.
Have security questions?
Our security team is available to answer questions and provide additional documentation for enterprise customers.