Trust & support
Security
T-Career is being built with explicit security, privacy, audit, and operational readiness foundations before production launch.
Authentication
Refresh tokens use HttpOnly cookie flow, CSRF-safe refresh/logout behavior, and scoped throttling foundations.
Authorization
PermissionService and EntitlementService centralize role, organization, recruiter, candidate, and access decisions.
Auditability
Privileged actions, verification decisions, privacy changes, candidate access, email operations, and admin actions are logged.
Private files
Resume, portfolio, and verification file access is designed around validation, authorization, and private download helpers.