How Relio Protects Your Data

Relio reviews publicly available careers sites and job postings. It does not require ATS credentials or access to candidate and employee records. This page explains what Relio may store when you request a review, create an account, or use ongoing monitoring.

Public hiring data

Relio processes publicly available careers-site and job-posting information to create findings and monitor changes. This may include posting titles, locations, descriptions, compensation and benefits language, public posting URLs, and related review results.

Account and monitoring data

When you create an account or use ongoing monitoring, Relio may store your email address, organization information, careers-site URLs, completed review results, findings, posting history, and change history so the service can provide continued access and comparisons over time.

What Relio does not require

Hiring Compliance does not require ATS credentials, access to candidate profiles, employee records, resumes, interview notes, or internal recruiting workflows. A review reads only publicly available job postings. It never logs into your systems, and it does not store candidate personal data.

Data storage and retention

One-time reviews. A free review is stored so it can be shown back to you and used as a baseline for future comparison, then automatically deleted after 30 days. A one-time review stores the careers-site URL and the review results only. It does not store your email or organization identity.
System support requests. If a review cannot read a careers site and you ask us to support that system, that is stored as a separate record from the review itself: the URL you tried, the system we detected (if any), what went wrong, and, only if you choose to provide one, an email address so we can follow up. The review record above never includes it.
Account holders. Your account information and saved reviews are retained while your account is active, and deleted on request.
Ongoing monitoring. Monitoring data (careers-site URLs, findings, posting history, and change history) is retained while your subscription is active. After cancellation it is retained for 90 days so you can export or resume, then permanently deleted.
Deletion requests. You can request deletion of your data at any time at support@relioengine.com.
Backups. Encrypted backups may briefly retain deleted data before they rotate out of the backup window.

Encryption and infrastructure

All traffic is encrypted in transit with HTTPS, using automatically managed TLS certificates (Let's Encrypt).
Relio runs on a self-managed Linux server using containerized services. The application database is not exposed to the internet. Only the web tier is reachable, and the database accepts connections from the application over a private internal network.
Access credentials and service secrets are held as server environment configuration and are never committed to source control.
Sensitive access tokens, such as monitoring access links, are stored as one-way hashes rather than as reversible plaintext.

Access controls

Paid monitoring requires a Relio account, and a subscription is reached from that account or through a secure, emailed access link scoped to it.
Portfolio Monitoring keeps a separate workspace for each company, and one organization's data is not accessible from another.
Shared links are read-only and show only what the sender chose to share.

Subprocessors

Relio relies on a small number of third-party services to operate. Each receives only the data it needs for its function.

Subprocessor	Purpose	Data processed	Location
DigitalOcean	Server and database hosting	All data stored and processed by the Relio service.	New York, United States
Resend	Transactional and lifecycle email	Recipient email addresses and email content, such as access links and monitoring summaries.	United States
Stripe	Payment processing	Customer email and payment method details. Relio does not store card numbers.	United States
Google Analytics 4	Usage analytics	Pages visited, features used, and product events such as starting a review. No names, emails, or posting content. Advertising personalization is not enabled.	United States
Cloudflare	DNS and content delivery	Standard DNS and network request metadata.	Global

Relio uses first-party analytics cookies to measure site and product usage. It does not use advertising cookies, and does not sell or share personal information for advertising. See the Privacy Policy for how to opt out.

Responsible disclosure

If you discover a security vulnerability in Relio, please report it to support@relioengine.com. We take all reports seriously and will acknowledge your report.

Security and data-handling questions

For questions about security or data handling, or to request a Data Processing Agreement, contact support@relioengine.com.