Four things we will not do.
Most services tell you what they promise. The faster way to work out whether we are the wrong fit is to read what we refuse, before you send us anything.
The four, word for word.
These are quoted from the service, not paraphrased for the web.
01 — On claims
“We will not write a claim your record cannot support. Ever.”
This is why the evidence register exists, and why some claims stay marked open rather than being smoothed into the résumé.
02 — On recruitment
“We do not source roles, submit you to employers, or take a fee from any employer.”
CVPRO is paid by you and only by you. There is no employer on the other side of this whose interests could quietly become the brief.
03 — On your materials
“We do not share your materials with employers or recruiters.”
Not as a lead, not as an anonymised example, not as a case study. The composites published on this site are constructed, not borrowed.
04 — On outcomes
“We do not promise interviews, offers or outcomes. Those are not ours to promise.”
A service that promises an interview is either not in control of that outcome or is not telling you who else is paying it.
Including the ones we could probably get away with.
Security language is where careful companies quietly overstate. Here is what we hold and, more usefully, what we do not.
| Claim commonly made | Our position |
|---|---|
| Bank-grade security | Not claimed. It is a marketing phrase with no defined standard behind it. |
| ISO 27001 certified | We do not hold it. Saying so is easier than being asked for the certificate later. |
| SOC 2 attested | We do not hold it. |
| Encrypted at rest | Our disks are not encrypted at rest. We would rather publish that than imply otherwise. |
| AI-powered analysis | Not claimed. For packages and the signal audit nothing automated reads your file: no parser, no scoring engine, no language model. A CareerOS agent build (Executive or Professional edition), which you choose separately, uses named AI only with your consent in the written scope, and a named reviewer checks every output. |
| Encrypted single-use upload | Held. A link signed with HMAC-SHA256, valid fourteen days, over TLS 1.2 or 1.3 only. |
| Automatic deletion | Held. Uploaded documents are deleted thirty days after the audit is delivered. |
| Human review | Held. One named reviewer opens every submission, which is why turnaround is a few working days. |
Why publish the gaps. A senior person deciding whether to send a career record to a company they have not met is doing a risk assessment. An honest list of what we do not hold is more useful to that assessment than a page of badges, and it is the only version of the list we can stand behind in a year.
How your record is handled
Illustrative photography. People shown are not CVPRO clients or coaches.
The refusals extend to coaching.
CVPRO now offers executive coaching and board readiness. The lines move with us.