Each side private
Candidates and hiring teams work on the same application. What each side keeps for itself never crosses over.
About a candidate who applied to it.
Even about its own applicants.
The team's side of the same application.
Roles and need-to-know
Every member of a company has one role: Owner, Admin, Recruiter or Interviewer. Access follows the work, not the title.
Accounts
Accounts are protected by a few small steps that add up. None of them asks much of you.
New accounts confirm their email address before they can sign in.
ConfirmedOwners can require it for the whole workspace.
If it wasn't you, you'll know straight away and can change your password.
Sent to your inboxSome actions ask you to prove it's you, even when you're signed in.
Audit log
Every company has an audit log. When someone asks who looked at a candidate's CV, the answer is written down.
Data and retention
Candidates decide what happens to their data. Companies don't keep closed applications forever.
Employers and guests
Jobs are public only when the company behind them is real, and a guest who joins an interview sees only that interview.
A company's jobs go public only after it proves it owns its website domain. It can add a DNS TXT record, confirm from a matching work-domain email, or be verified by Cortopus staff.
Someone outside Cortopus, like a colleague from another team, can join one interview with a link and a passcode. They see only that interview, never the rest of the application.
A guest sees this one interview, and nothing else on the application.
No. Cortopus is in development and doesn't hold a security certification, such as SOC 2 or ISO 27001, today. This page describes what each protection does, so you can judge it for yourself.
No. A company sees what you sent it: your name and contact details, and a copy of the profile you applied with and its CV, as they were when you applied. Your profile's name, private notes, to-dos and CV labels, and your applications to other companies, stay yours.
No. Team notes, scorecards, stars and blocks never reach a candidate. Reasons for a decision stay with the team too, unless the team chooses to include them in the message it sends.
Only the conversation or team note it's mentioned in. It has no tools and no access to private records, and its replies never count as a human reply to a candidate.
Candidates can export their data and delete their account from their settings. Hiring teams have a retention period: closed applications are deleted after it passes, unless the candidate asked to be kept on file.
Write to contact@cortopus.com with the details. Please give us a chance to fix it before sharing it publicly.
Early access is open
Create a candidate account in a minute, or set up your hiring workspace and publish your first job with its process upfront.
Running hiring at scale? Talk to us about early access
