TradeRecruit OSSign in

SDK & AI Disclosure

Last updated: September 11, 2026

TradeRecruit OS uses the following third-party services and software development kits (SDKs). This disclosure is provided for transparency and compliance purposes.

Infrastructure Services

Vercel

Application hosting, CDN, and edge deployment. Processes HTTP requests and serves the web application. Privacy Policy

Neon Postgres

Primary database. Stores all application data including candidate PII, company records, and financial data. Encrypted at rest with SSL/TLS in transit. Privacy Policy

Cloudflare R2

Object storage for uploaded documents (resumes, certification scans). Private bucket with no public access. All downloads authenticated through the application. Privacy Policy

Payment Processing

Stripe

Payment processing for invoice payments. Card data never touches our servers — Stripe Checkout handles all card information. We store payment intent IDs and transaction amounts only. Webhook signature verification prevents tampering. Privacy Policy

Email Services

Resend

Email delivery for outreach sequences, daily digests, and inbound reply processing. Email content (subject, body, from/to) is processed for tracking and storage. Webhook signature verification prevents unauthorized inbound processing. Privacy Policy

Analytics

Google Analytics 4

Website traffic analytics. Collects anonymized page view data with IP anonymization enabled. Cookies expire after 6 months. Analytics only runs on public pages (home, login). Dashboard routes are excluded from tracking. Privacy Policy

Google Search Console

Search performance monitoring and sitemap submission. Collects search query data, click-through rates, and indexing status. Does not collect personal data. Privacy Policy

AI Services

Language Model APIs

AI features are OFF by default and must be explicitly enabled in Settings. When enabled, AI is used for:

  • Drafting email communications (human review required before sending)
  • Generating candidate summaries (human review required before use)
  • Suggesting candidate-job matches (human review required before action)

AI prompts and outputs are logged in the audit trail. No candidate video, voice, facial features, or emotion data is ever stored or analyzed.

Authentication

NextAuth (Auth.js)

Authentication library using JWT strategy with argon2 password hashing. Session tokens are stored in __Secure- prefixed cookies with HttpOnly, SameSite, and Secure attributes.

Open Source Libraries

TradeRecruit OS is built with open-source software including Next.js, React, Drizzle ORM, Tailwind CSS, Zod, and Pino. A full dependency list is available in the project repository.