Tenant Isolation
Records are scoped by agencyId.
Security
Security model for sensitive recruitment data
Tenant isolation, private files, auth hardening, and audit logs are first-class product requirements.
Private Files
Files stay outside public assets.
Auth Controls
Reset, verification, expiry, and disabled-user checks.
Audit Trail
Sensitive actions are traceable.