Security & Compliance

Data Transmission

All data transmitted between your browser and our servers is encrypted using TLS (HTTPS). This includes your resume file and job description text.

No Data Storage

We do not store your resume files, job descriptions, or generated outputs on our servers. All processing is done in-memory during your session. When your session ends, the data is gone.

AI Processing

Resume text is sent to Anthropic's Claude API for AI processing. Anthropic maintains enterprise-grade security practices. We do not attach personally identifying metadata to these API calls.

Infrastructure

FreeResumeTools is hosted on Vercel, which provides automatic DDoS protection, edge caching, and enterprise security infrastructure. Our application enforces strict Content Security Policy headers to prevent XSS attacks.

File Upload Security

• Only PDF, DOC, and DOCX file types are accepted.
• Files are limited to 10MB maximum.
• Files are processed server-side and immediately discarded after text extraction.

Report a Security Issue

If you discover a security vulnerability, please contact us immediately at security@freeresumetools.io. We take all security reports seriously and respond promptly.