Skip to content

Applicant tracking for German SMEs

Candidate data is encrypted before it reaches the database.

wematch is multi-tenant, white-label applicant tracking. Your career page, your colour, your emails — and underneath, encryption that is not a switch in the settings but the way the thing is built.

One record, shown twice
One record, shown twiceWhat your team seesWhat sits in the database
NameAnna SchusterA7kQ2vX1p9mLdTz0…c4Rb
Emaila.schuster@example.def0Ns8yHJ3wEuQa6R…91Xk
Phone+49 40 1234567Pz5tG7oVbN2sKdMe…hY83
A data key of its own per organization, wrapped under a key-encryption key.
  • AES-256-GCM

    A data key of its own per organization, wrapped under a key-encryption key.

  • Tenants kept apart

    Another tenant’s resource answers 404. A 403 would already have told you it exists.

  • Deadlines that run

    Retention and erasure happen by themselves, not through a calendar reminder.

The starting point

Where applications usually sit today

Not out of carelessness, but because hiring at 50 to 500 people is one task among many.

  • In an inbox

    CVs as attachments, forwarded to three colleagues. Every forward is one more copy.

  • In a spreadsheet

    An application’s status lives in a column only one person keeps up to date.

  • On a shared drive

    Documents in the clear, in a folder whose permissions were last looked at in 2019.

  • In someone’s head

    Everyone knows the AGG erasure deadline. Nobody knows when it falls due for which application.

wematch takes both seriously: the workflow that costs the week, and the data you cannot afford to lose.

The difference

Encrypted before it reaches the database

Not disk encryption, and not “hosted in Germany”. The fields themselves are ciphertext by the time they arrive in PostgreSQL — and the integration test that proves it is not allowed to go red.

  • A data key per organization

    Names, addresses, phone numbers, original filenames, internal notes and email bodies are encrypted with AES-256-GCM. The key belongs to the organization and is stored wrapped under a key-encryption key that is not in the database.

  • Lookup without a plaintext column

    A candidate is found through a blind index — a keyed hash — rather than a column holding their readable email address. Search and plaintext are not the same requirement here.

  • Argon2id for passwords

    No SHA, no fast hash. Documents live in a private bucket under random object keys and are served through an authorized route, never a link that outlives the access it was granted for.

And underneath: tenant isolation that is not negotiable

Every internal endpoint derives the organization from the session, never from the request. Every query is scoped to it. A resource that is not yours answers “does not exist” — because “not allowed” would already have confirmed that it does.

This is architecture, not a checkbox. It is not something a competitor retrofits in a quarter.

White label

The career page is yours, not ours

An applicant sees your company. They do not see us — not in the header, not in the footer, not in the sender of the confirmation email.

  • Name, logo, favicon and primary colour
  • Headline and introduction of the career page
  • Imprint in structured fields, privacy as text or a link
  • The career page’s language, independent of the visitor’s browser
  • Email templates with live preview and an allowlisted placeholder set
  • Invitations to colleagues in your own branding

Live, without a deployment

Change the colour, save, see it. The colour reaches the page as a CSS variable — a database value never becomes a class name here.

Nothing phones home

No third-party request on a public page. Fonts are self-hosted, because a call to a font provider carries every visitor’s IP address there.

The loop

From the posting to the erasure deadline

A closed loop, not a collection of tools. Every step is built, not planned.

  1. 01

    Create and publish a role

    Draft, published, closed, archived. Publishing is an admin permission.

  2. 02

    The career page shows your company

    Overview, job detail, imprint, privacy — under your name.

  3. 03

    Apply in three steps

    Details, documents, review and consent. CV required, PDF or Word only.

  4. 04

    Stored encrypted

    The personal fields are ciphertext before the row is written.

  5. 05

    A confirmation in your name

    From your template, through an outbox worker with retries — a mail outage never makes an application appear to fail.

  6. 06

    Pipeline, ratings, notes

    Seven stages, internal comments, ratings from one to five with an encrypted note.

  7. 07

    Interview, rejection or offer

    Appointments with a calendar file, rejections one by one or as a selection, a dossier for whoever decides.

  8. 08

    The deadline runs out

    Retention ends and the data goes. Hired people are never swept up with it.

Features

What the team uses every day

Built for someone who hires between payroll and onboarding — not for a recruiting department with a training budget.

  • Pipeline and board

    Seven stages as a list or as columns. Moving is done with the select on the card, dragging is added on top — never dragging alone.

  • Still workable at two hundred

    Search, sorting, pages, and a view for everything that has been sitting untouched too long. Notifications when something arrives.

  • Comments and ratings

    Internal notes and ratings from one to five with an encrypted reason. An average appears only from two reviews up.

  • Interview appointments

    Arrange, move and call off an interview — with a calendar file for the candidate. Times shown in Europe/Berlin, stored in UTC.

  • Rejections as a selection

    Select several applications and reject them together, with a preview of the rejection email that stays editable for that batch.

  • Application dossier

    A ZIP with a cover sheet and the untouched original documents, to pass to the department. Without internal notes or ratings.

  • Email templates with an outbox

    Your own templates per organization with a live preview. Sending runs through a queue with five attempts and growing backoff.

  • Team and roles

    Admin and recruiter, enforced server-side. A recruiter cannot publish, cannot invite, and cannot promote themselves.

  • A draft for the posting

    Have a job description smoothed out — optional. With no key configured the button is never rendered at all.

Reach

Get found without an agency in between

A career page nobody finds is an expensive business card. Four ways out, all of them in the product.

  • Structured data, sitemap, robots

    Every published role carries JobPosting markup and appears in your organization’s sitemap. The internal portal is never indexed.

  • A job feed per organization

    An XML feed of your open roles that job boards and aggregators can read.

  • A widget for your own website

    Your job list in an iframe on the company site. An iframe, never a script in your DOM — your page stays your page.

  • Where the application came from

    The source travels in the URL, never in a cookie. A public career page sets nothing in the browser.

Licence

One monthly price per organization

No fee per application, no surcharge for the career page. What differs is the scope — not how the data is protected.

Placeholder: the amounts are not set yet. This line disappears as soon as real prices are in the locale files.

  • Start

    For one or two people who hire alongside everything else.

    —per month

    • Up to 3 active roles
    • 2 team members
    • Application list and pipeline
    • Email templates with a live preview
    Request a demo
  • Team

    Fits most often

    For continuous hiring across several departments.

    —per month

    • Up to 15 active roles
    • 10 team members
    • Board, appointments, bulk rejections, dossier
    • Job feed, widget and source tracking
    Request a demo
  • Unlimited

    For organizations hiring broadly and continuously.

    —per month

    • Unlimited roles
    • Unlimited team members
    • Drafting help for postings
    • Data processing agreement and a named contact
    Request a demo

In every tier

Security and legal obligations are not an upgrade path. They are the same in the cheapest licence as in the most expensive one.

  • Encryption of personal data
  • A tenant of your own, kept strictly apart
  • White-label career page with imprint and privacy
  • Retention deadlines, access and erasure
  • Accessibility to WCAG 2.2 AA
  • German and English

All prices net, plus VAT.

Contact

A demo with your own roles in it

Tell us briefly how many roles you fill in a year and who works on them. We will come back with a suggested time.

Optional

This enquiry is not stored. It is delivered as an email and afterwards exists only in that mailbox.