Encryption. All traffic to and from capcoresystems.com uses TLS 1.3 with 256-bit AES encryption. Data at rest in our databases is encrypted using AES-256.

No AI training. CapCore uses Anthropic’s enterprise tier. Your inputs (resumes, business plans, applications, chat messages) are not used to train Anthropic’s models, our models, or anyone else’s models. This is contractual, not aspirational.

Authentication. Passwords are hashed using bcrypt. Sessions are JWT-signed with rotating secrets. Two-factor authentication is available on all accounts.

Payment data. CapCore does not store or process credit card numbers. All payment processing is handled by Stripe (PCI DSS Level 1 compliant). We only see the last 4 digits of your card for receipts.

Data residency. CapCore data is hosted in the United States. Anthropic’s Claude API processing also occurs in U.S. data centers.

Reporting a vulnerability. Found a security issue? Please report it responsibly to info@capcoresystems.com with subject “Security”. We acknowledge within 24 hours and never threaten responsible disclosure.