Trust & Security
Navigait is designed for teams where IP, candidate experience, and regulatory posture all matter at once.
Data privacy
Zero-Training Policy
Your data is not our training set
Navigait uses large language models under strict zero‑training terms. Candidate résumés, outreach drafts, interview transcripts, and employer prompts are not used to train public models. When we call providers such as OpenAI, we do so under contracts and API policies that explicitly disable data retention for training and evaluation of general models.
Within Navigait itself, we only retain the minimum data required to operate your account, power the Anti‑Ghost Engine, and provide audit trails. We do not build a separate, internal foundation model on top of your data; instead, we store structured signals and metadata that describe decisions in a way your compliance and legal teams can actually review.
Compliance architecture
IP-Guardian separation
Clean room by design
IP‑Guardian sits between your proprietary environment and the candidate's device. Technical assessments run against synthetic or abstracted problems, not your production code or internal repositories. Candidates never see your private endpoints, infrastructure topology, or unreleased features.
Architecturally, employer data and candidate data are stored in separate schemas with explicit access boundaries. The clean‑room runtime has no direct path back into your source control or internal APIs; it only receives the minimal specification required to create an equivalent, non‑sensitive exercise. Every interaction is logged with enough metadata for you to audit who accessed what, and when.
This separation extends to how we call AI providers. IP‑sensitive prompts are not sent to general models; where we need model assistance, we work on redacted or synthetic variants. The goal is simple: give you the fidelity of real technical signals without the risk profile of handing your stack to a stranger on the internet.
Questions about security or compliance? security@navigait.com