Security

Protecting recruitment data matters

LYMS handles candidate, recruiter, and business information that deserves careful protection. We are building our security program around practical safeguards, Australian privacy expectations, and SOC 2-aligned security principles.

Secure access

•LYMS uses role-based access controls so users only see the workspaces and records relevant to their role.
•Administrative areas are restricted to authorised users and protected by server-side permission checks.
•We encourage strong account security practices for users who manage candidate, company, or billing information.

Data protection

•Platform traffic is protected in transit using HTTPS.
•We rely on trusted infrastructure and service providers for application hosting, authentication, payments, and data storage.
•Sensitive recruitment data such as profiles, applications, resumes, jobs, and organisation records is handled with privacy and access control in mind.

Operational safeguards

•We review platform changes before release and use automated checks where practical.
•We keep security-relevant settings, admin actions, and platform configuration under controlled access.
•We are building our internal security program around SOC 2 principles, including security, availability, confidentiality, and privacy.

Privacy and breach readiness

•Our privacy practices are designed with Australian privacy expectations in mind.
•We maintain a practical approach to identifying, assessing, and responding to potential data incidents.
•Where required, we will follow applicable Australian data breach notification obligations.

Current focus

Security work we prioritise

We do not claim formal SOC 2 certification unless and until an independent audit is completed. Our focus is to keep improving the controls that matter most for a recruitment platform.

•Least-privilege access for administrative functions.
•Separation of talent, recruiter, organisation, and super admin workspaces.
•Secure handling of email broadcasts and platform communications.
•Use of reputable third-party processors for core platform services.
•Ongoing improvement toward SOC 2-aligned policies, evidence, and controls.

Policies and contact

For details about personal information handling, read our Privacy Policy. For platform usage rules, read our Terms & Conditions. Security and privacy questions can be sent to info@lyms.ai.

Secure access

•LYMS uses role-based access controls so users only see the workspaces and records relevant to their role.

•Administrative areas are restricted to authorised users and protected by server-side permission checks.

•We encourage strong account security practices for users who manage candidate, company, or billing information.

Data protection

•Platform traffic is protected in transit using HTTPS.

•We rely on trusted infrastructure and service providers for application hosting, authentication, payments, and data storage.

•Sensitive recruitment data such as profiles, applications, resumes, jobs, and organisation records is handled with privacy and access control in mind.

Operational safeguards

•We review platform changes before release and use automated checks where practical.

•We keep security-relevant settings, admin actions, and platform configuration under controlled access.

•We are building our internal security program around SOC 2 principles, including security, availability, confidentiality, and privacy.