Security and trust

Built conservatively for hiring-adjacent workflows.

Ref&Go is designed to collect and organize employment reference responses, not to make hiring decisions. Consent, AI disclosure, human review, auditability, and employer access boundaries are treated as product requirements.

Consent

Authorization before contact

Candidates authorize the reference check before references are contacted. References consent before questions are asked.

Human review

No unreviewed AI report release

AI drafts and normalized artifacts enter the human review queue. Employer-facing reports are released after human approval.

Scope

No portable hireability score

Reports are employer-specific. Ref&Go does not produce a universal trust score or automated hiring decision.

Controls

Current trust baseline

AI disclosure in SMS, web, chat, and voice flows.

Candidate authorization ledger with typed-name evidence.

Reference consent ledger and per-employer consent language.

Protected-class, health, age, and family-topic screening for questions and answers.

Role-based employer access for team, billing, keys, workflows, and operations.

Secure magic links with OTP step-up and finalization revocation.

Audit timeline for consent, workflow events, model calls, approvals, billing, and retries.

Retention/redaction path for old evidence while preserving legal consent records.

Request-level privacy redaction that revokes report shares and magic links while retaining consent and audit records.

Operations

Failure recovery posture

Signed inbound webhooks with replay protection for configured integrations.

Outbound webhook delivery ledger with signed payloads.

Dead-letter status for jobs and outbound webhook failures.

Owner/admin retry controls with audit events.

Usage surfaces for package counts, voice spend, caps, and margin probes.

AI disclosure

Plain-language statement

Ref&Go uses AI assistance to route conversations, ask approved questions, normalize responses, draft summaries, and organize evidence for human review. Ref&Go does not make hiring decisions. A human reviewer approves any employer-facing report before release.

FAQ

Candidate and reference questions

Why am I receiving a Ref&Go message?

An employer is using Ref&Go to complete an employment reference workflow. Candidates authorize the process before references are contacted.

Can I decline?

Yes. References can decline to answer. SMS recipients can reply STOP to opt out of further SMS messages.

Who sees my answers?

The employer workspace that requested the reference receives the final human-reviewed report. Candidates receive status and dispute tools, not private reference content.

Does the AI decide whether someone should be hired?

No. AI can help structure information, but hiring decisions stay with the employer and reports require human review.