Legal
Security
How CareerFlyt protects the data you and your organization trust it with.
Last updated October 1, 2026
Access control
Every workspace has roles — owner, admin, coach, member — and each person sees only what their role allows. Sessions use secure cookies, and sign-in is protected against automated guessing.
Encryption
All data is encrypted in transit and at rest, using keys that CareerFlyt controls.
Uploaded documents
Every uploaded file is checked for type and size, then scanned for malware in an isolated area before anything can read it. Only a file that passes is stored, parsed, or shown to an AI provider. A file that fails, or cannot be scanned, is never opened and is deleted automatically.
Audit trail
Sign-ins, uploads, generated materials, exports, billing changes, role changes, and administrative actions are recorded in a tamper-evident audit log that organization administrators can export.
Monitoring and backups
Systems are monitored continuously, and the database is backed up automatically with 35 days of point-in-time recovery. Restore procedures are tested.
Certifications
CareerFlyt operates the controls above today and is working toward independent certification. We will state any certification here once it is achieved, and not before.
Reporting a security concern
If you believe you have found a vulnerability, email support@careerflyt.com. We ask for coordinated disclosure and will respond as quickly as we can.
Questions about any of this? Email support@careerflyt.com.
Privacy · Terms · Security · Data processing · Data retention · Delete my data
CareerFlyt is a product of NEURALROCKS LLC.