StayOnHire's Commitment to Security

At StayOnHire, we know security isn’t just a technical checkbox—it’s the foundation of trust between us and our users. That’s why we’ve built our architecture using industry-leading, enterprise-grade security systems. Each component specializes in its own security protocols, ensuring a multi-layered defense against potential threats.

How We Protect Your Login Credentials

When you log in to StayOnHire, your credentials are managed by Auth0, a security-first authentication platform owned by Okta. Auth0 provides enterprise-level protection, including multi-factor authentication (MFA) and anomaly detection, to keep unauthorized users out. We chose Auth0 because it allows us to implement strong security without compromising user experience.

For more details, check out Okta’s security policies: Okta Security.

Keeping Your Data Safe with Secure Storage and Backups

We store and manage data with MongoDB Atlas, which provides encryption both at rest and in transit. Beyond encryption, we ensure your data is always protected by taking automated snapshot backups at regular intervals.

Protecting Sensitive Information with AWS Secrets Manager

API keys and credentials are the backbone of our platform, allowing our services to communicate securely. We use AWS Secrets Manager to store and rotate these keys dynamically, reducing exposure and keeping access limited to only those who truly need it.

What’s great about our security architecture is that each layer operates independently—Auth0 for authentication, MongoDB Atlas for data storage, and AWS Secrets Manager for credentials. The odds of all three experiencing a simultaneous failure? Extremely low.

What Are the Most Common Security Risks?

Despite having strong security measures in place, the biggest risks usually come from human factors, not technology. Here’s what we’re most cautious about:

• Social engineering attacks (phishing) – A convincing fake email can trick even experienced users into revealing credentials.
• Reused passwords – If a StayOnHire user reuses a password from another breached service, it could be exploited.
• Misconfigured security settings – A simple permissions mistake could lead to unintended data exposure.

How You Can Stay Secure

Security isn’t just about the systems we use—it’s also about good habits. Here are some ways you and your team can stay protected:‍

1. Enable Multi-Factor Authentication (MFA): It adds an extra layer of protection beyond just a password

2. Use a Password Manager: Tools like Bitwarden can generate and store strong passwords for you, eliminating the need for reuse

3. Stay Informed: We recommend periodic security training to help recognize phishing scams and social engineering attempts.

At StayOnHire, we’re always working behind the scenes to improve our security measures, so you can focus on what matters most—running your business with confidence. If you have any concerns or suggestions, we’d love to hear from you!

‍