1. Our Security Approach
UKJobAlert is being designed with role-based access, employer verification and controlled job-publishing permissions. Security controls should be enforced by the production backend rather than by visual interface elements alone.
2. Employer Verification
Employer accounts must complete the required verification flow before job posting is unlocked. The production workflow is intended to validate the supplied UK limited company information against Companies House data and require an active company status.
A “Verified Employer” badge must only reflect the actual stored verification status; it must not be granted solely because a company name appears legitimate.
3. Account Safety
- Use a strong, unique password for your account.
- Do not share login codes, reset links or passwords.
- Be cautious of messages asking for money or sensitive credentials.
- Report suspicious vacancies or account activity through the appropriate support channel.
4. Safety for Job Seekers
Job seekers should verify unusual requests before providing sensitive personal or financial information. Legitimate recruitment should not require users to disclose passwords or unrelated account credentials.
5. Privacy by Feature
Profile and recruitment information should only be exposed where required by the relevant feature and the user's chosen settings. Candidate contact information should be used only for legitimate recruitment purposes.
6. Reporting Security Concerns
A dedicated official security/support email has not yet been added to the new theme. Until the final address is selected, the Contact page should be used as the visible support route.