Last Updated: October 31, 2025

This Security Policy defines the minimum technical and organizational measures used to protect data processed by Job Protocol Labs, Ltd. ("Company"), operating the Holly and Hunter products on HiringAgents.ai. It complements our Data Processing Agreement and Privacy Policy.

1. Scope and Objectives

• Applies to Company employees, contractors, and systems handling Company or Customer Data.
• Covers production and corporate environments, networks, devices, and third-party services.
• Objectives: ensure confidentiality, integrity, availability, and resilience of systems and data.

2. Roles and Responsibilities

• Security Owner: Provider Security Contact at [email protected].
• Engineering leads: implement security controls, SDLC, and vulnerability remediation.
• All personnel: follow this policy, complete security training, and report incidents promptly.

3. Data Classification

• Public: approved for public disclosure.
• Internal: default for non-public business information.
• Confidential: customer data, internal credentials, keys, non-public financials.
• Restricted: secrets and highly sensitive credentials. Store only in approved secret managers.

4. Access Control

• Least privilege and role-based access enforced across cloud, code, and data stores.
• Strong authentication for all admin and production access. MFA required for privileged roles.
• Unique user accounts. Shared credentials prohibited.