Skip to content

Recruitment / Security and reporting a problem

Security and reporting a problem.

Draft text for review.

DRAFT. This text is a starting point and has not been checked by a solicitor. Replace the square-bracket items and have it reviewed before the site goes live.

How we protect data

  • Staff sign-in needs two-step verification, and there are only two staff accounts.
  • The database allows the public to read published jobs and content only. Everything else is blocked unless you are signed in and allowed to see it.
  • CVs are stored privately and uploaded through single-use links.
  • Forms are protected against automated abuse.
  • Access keys are kept out of the website and the code.

Reporting a vulnerability

If you find a security problem, email thomas.michael.rees@gmail.com with the details. Please do not access other people's data, and give us reasonable time to fix it. We will acknowledge within 3 working days. We do not run a paid bounty programme.