Security & Governance

Operational rigor only matters if access, workflow, and communication are controlled.

Omelion is built with configurable workflow governance, scoped permissions, secure delivery options, and reviewable logs so agencies can standardize execution without opening unnecessary risk.

Identity & Access

Stronger authentication and clearer visibility into who can do what.

Internal and portal users can use passkeys, email-based 2FA, and visible session controls. Access is determined through role, enabled modules, menu permissions, extra menus, and scope logic rather than a simplistic one-role-one-view model.

Passkeys / WebAuthn

Support stronger sign-in experiences for both internal users and portal users.

Session visibility

Users can review active sessions and revoke access when needed.

Allowed domain controls

Login access can be constrained to approved email domains where policy requires it.

Security controls are woven into the operating model.
Internal identity Email 2FA, passkeys, password management, session history
Portal identity Separate login and passkey support for client users
Scoped visibility Menus, modules, and reporting scope define what each user can actually access
Impersonation support Admin workflows can include controlled impersonation for support use cases
Admin Governance

Admins can shape workflow, modules, stages, and policy from inside the system.

Governance in Omelion is not limited to user creation. Admins can tune the operating environment across workflow routing, board stages, SLA rules, dispatch, service types, locations, modules, custom fields, and email or AI logs.

Workflow Configure recruiter routing and escalation logic.

Define primary recruiter rules, escalation chains, loop policy, and manual escalation processing.

SLA & Dispatch Set operational expectations and fallback behavior.

Configure working hours, automation, fallback dispatchers, reminders, and notify-on-create behavior.

Menus & Modules Control what different teams can actually see and do.

Logical product modules and mapped menus keep the interface aligned to each operating role.

Controlled Intake & Delivery

Protect how data enters and leaves the system.

Public CV upload controls Optional CAPTCHA, verification, antivirus, approval, and enrichment workflow
Approval queue CV approvers review public uploads before they reach the live candidate database
Secure links Password-protected, expiring delivery paths for candidate packages
Verification pages Formatted CV outputs can be publicly checked as authentic Omelion-generated documents
Operational Trust

Secure client submissions and controlled candidate intake are part of the service model.

This matters because data risk in recruitment usually emerges in the messy edge cases: inbound CVs, oversized attachments, resubmissions, and off-platform document handling. Omelion pulls those edges back into governed workflows.

Verification tokens Password-protected links Expiry windows Duplicate warnings Approval queue
AI Oversight

AI assistance is useful only when it is reviewable and policy-bound.

Omelion supports AI-assisted motivation writing and rewrite workflows, but it also provides AI response logs, flagged prompts, usage visibility, and blocked-request controls so leadership can supervise how those tools are being used.

Motivation writing support

Use AI to draft and refine client-facing summaries inside the formatted CV process.

AI logs and feedback review

Inspect usage, feedback, flagged prompts, and blocked requests from the admin layer.

Policy-driven usage

Support a more disciplined AI operating model than open-ended prompt tools usually allow.

Governance Principle

“The system should not only move work faster. It should make access, submission, workflow, and AI usage easier to govern.”

Next Step

Review Omelion through the lens of control, not just feature breadth.

See how identity, workflow governance, secure delivery, and auditability fit into a single recruitment operating platform.