Security
You shouldn't have to take the other firm's word for it.
Build recruiting partnerships with clear boundaries. Union Place separates anonymous discovery from protected details, checks firm and deal-room access, and keeps agreed terms and collaboration events together. Pilot access is supervised; live purchasing and bank settlement are not yet available.
Protection tied to the agreement
Review the identified agreement and its protection period before committing your firm. The platform retains the version and recorded acceptance; the governing record determines the applicable obligations. A new template never silently replaces an executed deal.
Public legal readers distinguish inactive proposed documents from previously accepted records. The proposed r4 release has no effective date and is awaiting review. Reading it does not execute a contract or activate its terms.
Deliberate identity sharing
Discovery does not expose candidate identity. Protected client and candidate details follow the permitted deal workflow; connecting or locking terms does not automatically authorize every disclosure. Sharing remains a deliberate, recorded action.
Isolated deal rooms
A listing can lead to separate collaborations. Each room checks whether your firm is a participant before returning protected room data; shared details belong to that collaboration.
Leak check before publishing
Publication checks help identify names and contact details in public listing fields. Your firm still needs to review its anonymous description carefully; automated checks cannot guarantee that every identifying detail will be detected.
Signed, hashed, timestamped
Agreement execution records the accepted revision, signing firm, administrator, and time. Content hashes bind the agreed text and terms, and both firms can retrieve the retained executed copy.
A retained collaboration record
Use the deal room to retain proposals, confirmations and work updates. Approved outside communications do not replace the signed agreement or change the agreed compensation.
Clear changes and cancellation
Changes and cancellation follow the particular agreement and type of work. Proposed terms remain labeled for review; historical agreements keep their accepted wording. Check your retained record for the rules that actually govern your collaboration.
Separate payment authorization
The settlement workflow requires a payer-firm administrator to authorize a particular payment. Signing an agreement never authorizes an automatic debit. Processing and completed settlement are separate states. Live bank settlement remains unavailable.
Candidate consent required
Every candidate posted to the Layup Exchange requires the posting firm to confirm it has the candidate’s permission to share an anonymized profile with recruiting partners. It is a required attestation, recorded with a server timestamp — Union Place relies on the posting firm’s confirmation and does not independently verify it.
An audit trail you can see
Recorded deal events include agreement acceptance, terms locking, identity sharing, and placement updates. Both participating firms can follow the collaboration history within their permitted access.
Infrastructure and data handling
Authentication — handled by Clerk. Protected firm operations check current membership, organization scope, and administrator or member permissions.
Data storage — managed Postgres (Neon). Protected client and candidate details are separate from public listing fields and subject to the applicable access and sharing checks.
Payments — provider-hosted checkout and bank authorization are prepared with Stripe. Live charging and settlement are disabled for the current pilot.
Documents — uploaded job descriptions and resumes support listing preparation. Restricted document retrieval follows server-side access checks; candidate permission remains the representing firm's responsibility.
Union Place is an early-stage private network and does not yet hold a SOC 2 attestation. If your firm has a specific security or data- processing requirement, tell us and we'll answer directly.