Security and privacy

How Motium protects interviews and the people in them.

Interviews hold real people's faces, voices and careers. Here is what Motium does with them, stated as plainly as we can. To report a security problem, write to security@motium.io.

Recordings and transcripts

Private storage. Recordings and transcripts are kept in private, encrypted storage that cannot be read over an unencrypted connection. Nothing is public.

Short-lived links. A recording is played through a link that stops working within an hour. There are no permanent links to a recording.

Only the hiring team. Only the employer's own team sees a candidate's recording and transcript, in their own workspace. One company's workspace never shows another's roles, candidates or interviews.

Backups. The interview database and the signed record live on an encrypted file system with daily backups, kept for thirty-five days.

A signed, tamper-evident record

Every question, answer, piece of evidence and score is signed into a record as the interview happens. Any change made afterwards would show, so an employer can show later what was asked, what was said and what was evaluated. Personal details are kept apart from that record, so they can be erased when a candidate asks to be deleted without breaking it.

Signing in

Invited people only. Nobody can create an account in a company's workspace on their own. An administrator adds each person, and removing someone signs them out everywhere.

Strong passwords and an optional second factor. Passwords are at least twelve characters, and anyone can turn on a second sign-in step. Sessions end after eight hours.

Encrypted in transit. The site is served over HTTPS only, with modern TLS.

Interview links expire. A candidate's link works for seven days and only for that candidate's interview.

Fair to candidates

Candidates are told at the start that the interviewer is an AI, that the conversation is recorded, and that a person decides.

No questions are asked about age, family, health, religion, national origin or any other protected subject. Every question an employer writes is checked twice before it can be used.

Motium never makes or automates the hiring decision. A person on the hiring team advances or declines each candidate, with a reason.

A candidate can ask for their personal details to be deleted by writing to privacy@motium.io.

The privacy notice sets out what is collected, who it goes to, how long it is kept, and what you can ask us to do.

Payments and secrets

Payments are handled by Stripe; Motium never sees a card. The keys Motium uses to run are kept in a secrets manager, never in its code.