Security and beta status

Rolevia is a beta-testing service, not an independently audited or certified system. No service can promise complete security. Keep copies of important documents and avoid sensitive personal data during testing.

Implemented protections

• HTTPS on the hosted service, authenticated account operations, and database ownership policies.
• Private-response cache restrictions and a service worker limited to public cached resources.
• CV file size/type checks and document extraction limits.
• Browser security headers and server-only handling of privileged credentials.

Known limits

Real two-account isolation and complete recovery-email flows still need verification. Upload abuse controls, deletion/retention processes, and production email configuration are unfinished. Passing automated tests is not a penetration test, legal approval, or proof against data loss.

Reporting a problem

Report security concerns to sahilrajpurkar1998@gmail.com. Describe the affected feature without including credentials, recovery links, CVs, or other people's information. A dedicated security response process still needs to be established. Do not test against other users' data.

See the privacy notice and operator information for the current gaps.

Last updated: 12 September 2026.