Is Vettasy safe to install? What the app does on your computer, and what it never does

Yes, within a narrow and published scope. The app runs only while the interview is open, with no background process, no autostart and no administrator rights, and the installers are code-signed. With consent it checks five system signals, and it never reads files, keystrokes outside the app, browser history or the screen outside the app. The first independent penetration test is scheduled for the fourth quarter of 2026.

Short answer: yes, within a narrow and published scope. The Vettasy app runs only while an interview is open, needs no administrator rights, and never reads files, keystrokes outside the app or browser history. Below is what it does on a computer, what it never does, and how to check each point yourself.

Why an interview in Vettasy needs an app

Vettasy runs interviews in a desktop application for Windows and macOS rather than in a browser tab. The reason is Verified Session. The things it checks, such as a window hidden from screen capture or a virtual camera, are facts about the machine, and a browser cannot see them. The app is free for candidates, and no account is needed: it opens with the invitation code from the employer.

What the app does on your computer

• It runs only during the interview. There is no background process, no autostart and no scheduled task. Task Manager on Windows or Activity Monitor on macOS shows this after the call ends.
• It asks for no administrator rights.
• The Windows and macOS installers are code-signed.
• The tech check before the interview takes about two minutes and asks for the camera, the microphone and screen capture, which the interview tools need.
• With a separate consent, Verified Session checks five system signals between the start and the end of the interview: windows hidden from screen capture, known AI copilot processes, virtual cameras and audio drivers, a second monitor (that one is connected, and for how long), and one liveness check at the start.
• It records the interview: audio, video, the code pad, the whiteboard and the session chat. Nothing outside the app.

What it never does

• Read files on the computer.
• Record keystrokes outside the app.
• Read browser history.
• See the screen outside the app, or what is on a second monitor.
• Analyse emotions, facial expressions, tone of voice, gaze or posture.
• Run before you join or after you leave.

The liveness check is not face recognition and not an ID check, and it keeps no face template. It runs once, at the start, and is never repeated during the interview.

Consent comes first

The consent screen appears before anything starts and asks for two separate consents: one for the recording and one for Verified Session. If either one is declined, the interview does not start and nothing is saved. The employer receives a neutral notice that the candidate did not proceed, with no reason and no rating. The consent record is kept with the recording, and both sides can see it.

Where the data goes

Recordings and reports are stored in Germany, in Hetzner data centers in Nuremberg and Falkenstein. They are encrypted with AES-256 at rest and TLS 1.3 in transit. The employer sets retention for each role, from 7 to 90 days. Deletion on request takes up to 30 days, backups included, unless a dispute is open. Customer data is never used to train models.

The candidate receives a copy of the recording, the transcript and the same session report as the employer, and can dispute any line within 14 days.

How to check it yourself

• Download only from vettasy.com or from the personal link in the invitation, which also leads to vettasy.com.
• On Windows, open the installer's Properties before running it and look at the Digital Signatures tab. macOS checks the signature of a downloaded app when it first opens.
• After the interview, close the app and look for Vettasy in Task Manager or Activity Monitor. Nothing should be running.
• Remove the app like any other: from Settings on Windows, or by deleting it from the Applications folder on macOS.

Audits, and what is still ahead

Vettasy has a SOC 2 Type II report from Schellman for the observation period from 13 March to 19 August 2026. The report is available under NDA on request to security@vettasy.com. The first independent penetration test is scheduled for the fourth quarter of 2026, and ISO 27001 is planned for 2028. Security issues go to security@vettasy.com; the same contact is published in /.well-known/security.txt.

Sources

• Vettasy, Trust center, Verified Session, AI Notice and Privacy Policy.

Written by the Vettasy team

Vettasy is a desktop application for job interviews. Employers run structured, recorded interviews in it with verified participants. It is free for candidates. Windows and macOS.