What we shipped

SAML 2.0 and OIDC single sign-on with SCIM 2.0 provisioning, so your identity provider owns who has access and de-provisioning is automatic.

A signable Data Processing Addendum with the EU Standard Contractual Clauses, a named subprocessor list with processing regions, a retention matrix, a US state-privacy notice and a published vulnerability-disclosure policy.

Scorecards, agendas, invitations and onboarding now render on a 360px screen with a collapsing sidebar. Only the kanban pipeline board still asks for a wider window.

Access can now be scoped to the people staffed on a role rather than to the whole workspace, and a confidential requisition stays invisible to everyone outside its team.

Pipelines are no longer a fixed seven-stage list. Each job defines its own stages, and every status change goes through one write path so the board and the API can no longer disagree.

Interview transcripts are diarised, so talk-time, coverage and every evidence quote are attributed to the person who actually said them.

A panelist no longer sees another panelist’s draft before submitting their own, and the debrief is written from submitted human feedback rather than from AI drafts.

Scout redacts protected-class signals before scoring, records a decision log for every recommendation, and can be set to require a human before anyone is advanced.

Every workspace-owned table now carries a PostgreSQL row-level-security policy in addition to application-level scoping, and credentials, tokens and webhook secrets remain encrypted with rotating AES-256-GCM keys.

Audit entries are hash-chained and immutable at the database level, so a modified or deleted record is detectable rather than invisible.

Booking an interview with your own meeting link works whether or not a recorder is available, and calendar reconciliation no longer flags healthy interviews as needing attention.

Turning on required 2FA now walks anyone who has not enrolled through enrolment instead of refusing their sign-in.