Security & trust

Interview data is the most sensitive data you handle.

Capifiq treats it that way. Collection is transparent and scoped to the interview session, evidence is encrypted and cryptographically sealed, and the agent only ever observes and reports — it never blocks, restricts, or decides.

What is collected

Clear collection.
Explicit controls.

Capifiq documents exactly what can be captured during a monitored interview, which evidence actions are controlled by the interviewer, and how long interview records are retained.

Transparency matters.Evidence collection occurs only during the interview session, and collected interview data is retained to match your enterprise retention policy.
Read the full privacy policy →
Bot present
Meeting and screen recordingWhen the Capifiq meeting bot is included in the meeting, the interview screens are recorded for the session.
Interviewer controlled
On-demand display screenshotsThe interviewer can capture a screenshot of any display at any moment, whether that display is currently shared or not.
Always captured
Control and hotkey activityControl-key combinations and monitored hotkey activity are captured throughout the active interview.
Enterprise retention
Long-term evidence retentionData collected during the interview, including sealed integrity evidence, is retained to match your enterprise retention policy.

How we protect it

Encrypted, hashed, and sealed.

Every piece of interview evidence is protected end to end and preserved so it holds up when a hiring decision is questioned.

Encrypted in transit and at rest

Session data, detection signals, and integrity reports are encrypted the entire way — on the wire and in storage.

Tamper-proof evidence

Every finding is cryptographically hashed at the moment of capture, so it can be independently verified and cannot be quietly altered later.

Server-side verdicts

The agent collects signals; it never makes detection decisions on the candidate's machine. Verdicts are produced server-side, where they can be audited.

Retained and reviewable

Sealed evidence is kept to match your enterprise retention policy, so a finding remains reviewable long after the interview — for the hiring team and, if needed, a dispute.

NIST-aligned evidence handling

Evidence is captured, hashed, and preserved following recognized forensic evidence-handling practices aligned with NIST guidance, so the chain from capture to report holds up under scrutiny.

SOC 2 Type II — audit in progress

Our SOC 2 Type II audit is underway, targeting completion within roughly 160 days. Encryption in transit and at rest and controlled access are already in place today.

Evidence integrity

A record, not a rumor.

Capifiq's value is only as good as the trust you can place in its findings. So every finding is built to stand up to scrutiny: it is timestamped on the session timeline, hashed at capture, and sealed into the final report.

That means a result isn't a screenshot someone could have edited or a score someone could have nudged. It is a verifiable record of what happened, preserved.

Every finding is

  • Timestamped on the session timeline
  • Cryptographically hashed at the moment of capture
  • Verified server-side, not on the candidate's machine
  • Sealed into the report and independently verifiable
  • Retained to match your enterprise policy

Scope of access

What the agent accesses — and when.

The companion agent's access is scoped to the scheduled interview and to the job it exists for. It observes integrity-relevant activity for that session, and only for that session.

Only during the scheduled session

  • The interview screens, when the meeting bot is present in the call
  • On-demand screenshots the interviewer chooses to capture
  • Control-key and monitored hotkey activity during the interview
  • Environment integrity signals for the session

Boundaries

What Capifiq never does.

An integrity check should verify the interview — not take over the candidate's computer or pass judgment on its own. Capifiq is built with hard limits, and it holds to them.

Hard limits

  • Never blocks, terminates, or restricts anything on the candidate's machine
  • No persistent monitoring — runs only inside the scheduled interview window, nothing before or after
  • Requires no administrator privileges; runs in user space
  • Produces no cheating score, risk band, or ranking — only a factual timeline
  • Never accuses a candidate automatically — findings go to the interviewer, and a person decides

Fair to candidates

Transparent, not covert.

Fair hiring and a respectful candidate experience are not in tension. Capifiq is designed to be clear with candidates about what happens and when.

Told up front

Candidates receive clear instructions before the interview explaining the integrity check and the companion agent. Nothing is hidden.

An integrity check, not a lockdown

Candidates keep their normal setup. Nothing is blocked or restricted, and the agent runs only during the scheduled session.

Reviewed by a human

Findings are surfaced to the interviewer as factual events. A person decides what they mean — Capifiq never decides an outcome.

Questions

Security questions.

Is interview data encrypted?
Yes. Session data, detection signals, and integrity reports are encrypted in transit and at rest.
How long is interview data retained?
Interview data, including sealed integrity evidence, is retained to match your enterprise retention policy — so findings remain reviewable for the hiring team and, if needed, a dispute. Full detail is in the privacy policy.
Does Capifiq record the interview?
When the Capifiq meeting bot is included in the meeting, the interview screens are recorded for that session. The interviewer can also capture on-demand screenshots of any display, and control/hotkey activity is captured during the active interview. Collection happens only during the interview session, and everything collected is encrypted and sealed.
Is Capifiq a lockdown or surveillance tool?
No. It is an integrity check, not a lockdown. The agent observes and reports; it never blocks, terminates, or restricts the candidate's machine, requires no admin privileges, and runs only inside the scheduled interview window.
Do candidates consent and know what happens?
Yes. Candidates are told before the interview what the integrity check involves. Collection is transparent and scoped to the session — not covert, and not running before or after.
Who can see the evidence?
Findings and the sealed integrity report are available to the interviewer and hiring team through the Capifiq dashboard. Evidence is hashed and sealed so it is verifiable and cannot be quietly altered.
Is Capifiq SOC 2 compliant?
Our SOC 2 Type II audit is in progress, targeting completion within roughly 160 days. In the meantime, encryption in transit and at rest, controlled access, and NIST-aligned evidence handling are already in place. We can share our current security posture and questionnaire responses under NDA — contact us for details.
What does the companion agent access?
Only what the interview requires, and only during the scheduled session: the interview screens when the meeting bot is present, on-demand screenshots the interviewer captures, control and hotkey activity during the interview, and environment integrity signals. It never runs before or after the session, takes no admin privileges, and never blocks or restricts the machine.

Get started

Integrity you can stand behind.

See how Capifiq handles interview data on your own interviews — encrypted, sealed, and reviewable.

Free white paper

Remote Hiring Integrity in the Age of Invisible AI

Fifteen pages on how live AI assistance works, why conventional proctoring misses it, and what actually protects your interviews — written for hiring leaders.

Get the white paper