Shared security and product boundaries

Bookcicle and its brands use shared security and operational processes. Each brand publishes a focused policy for its product. Shared operations do not grant users access to another person’s data.

• Bookcicle Studio: manuscripts, revisions, collaboration and authorship evidence. A proof checks the recorded information; it is not a guarantee of identity or legal notarization.
• CareerGR: account-scoped résumés and reports, with user-directed read-only sharing links.
• OurSircle: zero-knowledge end-to-end encryption for supported credential values.
• Redline: comparison inputs and artifacts, temporary storage where needed, and access through viewer links or tokens.
• Funcspace: private drafts and preview credentials are distinct from approved public research and profiles. Development and test features do not establish production availability.

SOC 2 Status

Bookcicle is actively working toward SOC 2 Type II readiness. We are currently reviewing our technical and operational controls, remediating identified gaps, and formalizing evidence collection and security processes. We have not yet completed a SOC 2 examination.

This is a shared readiness program covering the controls used by Bookcicle and its brands. No completed examination or certification is claimed for any brand.

1. Encryption & Data Protection

• We employ end-to-end encryption for connections to all service endpoints, and encryption at rest for stored information.
• OurSircle credentials: Supported credential values go further with zero-knowledge end-to-end encryption (E2EE). Only you and authorized recipients can decrypt them.

2. System Monitoring

Our infrastructure is monitored for unusual activity using automated tools. We utilize firewalls, intrusion detection, and other methods to detect and prevent unauthorized access attempts.

3. Vulnerability Testing

We perform regular vulnerability scans and occasional penetration tests to identify potential security issues. Critical issues are addressed promptly.

4. Responsible Disclosure

We encourage security researchers and users to report any potential vulnerabilities they discover. Please contact us at:

security@bookcicle.com

We will investigate all legitimate reports and take appropriate action to address any confirmed vulnerabilities.

5. Incident Response

In the event of a security incident, we have an incident response plan designed to contain and remediate threats. Affected users will be notified if their data or accounts are at risk, in accordance with applicable regulations.

6. No Guarantee

While we strive to protect your information, no system can be 100% secure. We cannot guarantee the absolute security of any data transmitted or stored on our systems.

7. Updates to This Policy

We may update this Security Policy periodically. Material changes will be communicated through our Site or other appropriate channels. Your continued use of the Site constitutes acceptance of any updates.

8. Contact Information

If you have any questions regarding this Security Policy or suspect a potential security issue, please reach out to:

security@bookcicle.com

Last Modified

2026-10-06