Security & Trust
Built for candidate control.
Intrakit handles personal career information, public sharing, and candidate-directed agent behavior. That makes trust part of the product, not a separate afterthought.
Candidate control comes first
Your How I Work profile, your visibility settings, and your agent boundaries are designed to be configurable by you, not inferred behind the scenes.
Public does not mean everything is public
Published surfaces are intentionally scoped. Candidate-private fields, coaching rationale, and honesty-layer context are not exposed on public recruiter views.
Agent behavior is bounded
On Pro, your Career Agent answers from your Kit, within the limits you set: candidate-approved material and your settings. Coaching notes and private context aren't shared just because a Career Agent exists. Pay is shared only if you say yes.
What This Looks Like In Practice
Security is implemented through product behavior, not just policy text.
This page is a high-level trust overview. The deeper legal details live in our privacy and cookie policies, but the product itself also reflects clear limits around access, visibility, and agent behavior.
Authentication is handled through Supabase-backed session infrastructure
Account, publishing, sharing, and app data are stored behind authenticated access controls
Public share links and public agent pages can be disabled, revoked, or unpublished
Password protection is supported for eligible share-link workflows
Security events, audit surfaces, and rate-limit protections exist across sensitive product areas
What You Control
Profile visibility and what appears on public surfaces
Share-link status, including whether a link is active, disabled, or revoked
Whether the Career Agent is active and what topics require approval
Cookie and browser storage choices through your browser and the site consent controls
Career Agent Boundaries
The agent is constrained on purpose.
Intrakit's trust model is not based on pretending models are infallible. It is based on keeping the source material explicit, keeping private context private, and sharing sensitive details only with the candidate’s yes.
Approved basics and how you work can be answered from your Kit for people you’ve let in
Pay is shared only with the candidate's yes
Anything outside the candidate's limits gets the same neutral reply
Private context is not surfaced on the public page just because the agent exists
How Intrakit Works For Both Sides
Two sides, one candidate-owned boundary
Intrakit serves two sides: candidates who own their How I Work profile, and the hiring teams and recruiters who read it. We are candidate-owned, not a neutral broker between them. Your data is yours, and your Career Agent represents you, never the employer.
Your profile isn't searchable
Your profile isn't searchable, on Intrakit or by search engines. Recruiters can't browse or look up candidates here. They see only what you send them: a share link, or your Career Agent's answers to their questions.
Related Policies