Security
How we protect your data
Recruiting data is sensitive. Here's how Maya keeps it safe, and how to reach us if you find something.
Last updated · May 2026
Encryption
Data is encrypted in transit (TLS 1.2+) and at rest. Secrets and integration tokens are stored in a managed secrets vault, never in plain text.
Access control
Role-based access within your workspace, SSO and SAML on higher plans, and least-privilege access internally with audit logging.
Compliance
A SOC 2 Type II audit is in progress. We can share our current status, sub-processor list, and data-processing addendum on request.
Report a vulnerability
Found an issue? Email security@maya.co. We acknowledge reports within one business day and won't pursue good-faith research.