Security
CV Wallet Security
At CV Wallet, we take a forward-thinking approach to security, centred around web 3.0 principles, including decentralisation, self-sovereign identity (SSI), Verifiable Credentials and zero-knowledge proof.
We use what you already have
When you download our app and set up your CV we don’t ask you to set up an account. Your CV and data are securely stored locally on your device. Your information is protected by local encryption and a secure passcode - and most likely by biometric security (such as fingerprint or face ID, assuming you have enabled those features). You have sovereignty over your identity and data, and choose if and when to share your CV/Resume with prospective recruiters.​
Not sharing your data is one of our superpowers
Unlike many organisations, we actually succeed more by sharing less. We are advocates of skills-based sourcing. Hence our platform is designed to preserve anonymity, meaning that candidates can be shortlisted on skills and merit, rather than on PII-biased measures.
Cyber Essentials Certified
Cyber Essentials is a UK-backed scheme, developed by the National Cyber Security Centre (NCSC). It’s your assurance that we have cyber security covered.
Encryption, but better
In the cases where we do need to store your data, we’re using a potent industry-proven encryption algorithm (AES-256), which we have put to work in a bespoke three-way architecture. No individual party (neither us nor the employer) can see your data until you disclose a special component of the key, issued via the app.
Blockchain and Verifiable Credentials
(No cryptocurrencies in sight)! The blockchain is simply our way of ensuring and proving that information has not been tampered with. When an issuer (such as an assessment provider or academic institution) makes a credential available to a Wallet holder, that user can claim the credential. A relying party (such as a potential employer) can then request verification of that credential as proof of a qualification. The blockchain ecosystem secures and controls this process.​
GDPR Compliant
We take privacy seriously. Our first principles dictate that we handle personal data only where absolutely necessary, as little as possible and with full commitment to data protection. You can read our Privacy Policy here.