AI Risk Assessment

1. Hallucination / Fabrication

Likelihood: Low · Impact: Medium (reputational)

Risk: The AI generates false information about a candidate's experience, credentials, employment history, job fit, or interview readiness.

• Evidence gating requires Story ID citations for factual claims
• Each tenant's knowledge base contains only candidate-provided facts
• System prompts instruct uncertainty acknowledgment when data is insufficient
• Practice feedback evaluates only the submitted transcript and saved prep context
• Tenant isolation ensures one candidate's data cannot leak into another's AI responses

2. Prompt Injection

Likelihood: Medium · Impact: Low-Medium (per-tenant scope)

Risk: A recruiter or external user attempts to override system instructions to extract system prompts, candidate data, or cause the AI to behave outside its intended scope.

• System prompts treat all user input as untrusted
• Rate limiting via Vercel KV (Redis) prevents abuse at scale
• Cloudflare Turnstile protects public start forms before uploads or AI preparation continue
• Multi-tenant architecture limits blast radius to a single candidate's assistant
• Input length limits enforced per request

3. Inappropriate Content

Likelihood: Very Low · Impact: Medium

Risk: The AI generates offensive, harmful, or unprofessional content in a career context.

• Anthropic's built-in content filtering applied at the API level
• System scoped exclusively to career and professional questions
• Conversation logs enable post-hoc review and prompt refinement

4. Cross-Tenant Data Leakage

Likelihood: Very Low · Impact: High

Risk: One candidate's data surfaces in another candidate's AI career agent responses, or unauthorized access to tenant data occurs.

• Supabase Row Level Security (RLS) enforces data isolation at the database level
• Each AI session is scoped to a single tenant's knowledge base
• Authentication via Supabase Auth ensures tenant-scoped access control
• No shared context or memory between separate tenant assistants

5. Privacy Exposure

Likelihood: Low · Impact: Medium

Risk: The AI reveals sensitive personal information that candidates did not intend to share publicly, such as compensation data, private contact details, confidential job descriptions, raw practice answers, or employment circumstances.

• Candidates control exactly what data enters their knowledge base
• System prompts mark sensitive categories (compensation, personal details) as confidential by default
• Branding preferences allow candidates to set disclosure boundaries
• Raw Interview Mode answers stay private unless the user chooses to refine or share them
• The product does not use facial analysis, emotion detection, stress detection, or personality inference

6. Availability / Abuse

Likelihood: Medium · Impact: Low (cost and availability)

Risk: Service degradation or excessive API costs through automated abuse or denial-of-service attacks.

• Per-IP and per-tenant rate limiting via Vercel KV (Redis)
• Public pending-start submissions require Cloudflare Turnstile verification before storage, email, or AI preparation proceeds
• Input length limits enforced per request
• Vercel edge network provides DDoS protection at the infrastructure level
• Sentry monitoring alerts on abnormal error rates or usage patterns

7. Bias and Fairness Risk

Likelihood: Very Low · Impact: High

HireProxy is candidate-controlled and is not an employer screening, ranking, or rejection system. AI responses are constrained to the candidate's career data and role context. The AI does not generate assessments of protected characteristics including race, gender, age, disability, or national origin. Recruiters are advised that AI-generated summaries should serve as one input among many in hiring decisions, not as a sole basis for screening or rejection.

8. Third-Party AI Provider Risk

Likelihood: Low · Impact: Medium

HireProxy uses Anthropic for AI responses, fit analysis, interview prep, and answer evaluation. It uses OpenAI for voice transcription and spoken coaching. Response quality and behavior are subject to provider model updates and usage policies, which are outside HireProxy's direct control. HireProxy monitors for model behavior changes and maintains the ability to update system prompts or transition to alternative providers if needed.

Conversation content, job descriptions, practice transcripts, and practice audio may be transmitted to third-party AI providers for processing and are subject to those providers' privacy policies and data handling practices.

9. Interview Practice Misuse

Likelihood: Medium · Impact: Medium

Risk: A user attempts to use Interview Mode as undisclosed real-time assistance during a live interview or in violation of employer, interviewer, school, or platform rules.

• Terms prohibit using Interview Mode as undisclosed live-interview assistance
• Product copy positions Interview Mode as preparation and practice, not live interview replacement
• The workflow is built around saved prep, practice answers, feedback, retries, and post-practice story refinement