Data ethics
What we hold, what we suppress, and what we will not publish — including the cases where the answer costs us a story.
Method version 1.8.0 · Last generated July 29, 2026
Commitments
- •k-anonymity suppression. No published cell describes fewer than 5 distinct companies. Where a breakdown would fall below that floor, we coarsen the grouping until it clears, or we suppress the cell — we never publish it with a caveat.
- •Pre-publication re-identification review. Before any study ships, we check whether its cells can be recombined — with each other, or with our own published pages — to single out a company that the suppression rule was meant to protect. A study that fails this review does not ship.
- •No person-level data. We hold no names, contact details, or profiles of individuals, and we publish nothing about a named individual. The complete list of fields we hold about a posting is on this page.
- •Named companies appear only where the posting itself is public and the company chose to advertise under its own name.
Suppression floor
No published cell describes fewer than 5 distinct companies. This is a hard floor, not a guideline: a breakdown that cannot clear it is coarsened until it does, or it is not published.
Provenance
Everything on this site is derived from public job advertisements — postings on company applicant-tracking systems and public job boards. Nothing is derived from a customer's account, usage, or queries.
The research corpus and any customer-facing product data are read through different code paths with different credentials. The generator that builds these pages holds a read-only corpus connection and cannot reach customer records at all.
The reads this site is able to perform are enumerated below and are all aggregate- or page-shaped. Single-record lookups are structurally forbidden at the seam and fail the build if added.
Every read this site can perform
assert_corpus_freshcollect_trend_aggregatescount_corpus_signalscount_distinct_sourcescount_signals_by_companycount_signals_by_dimensioncount_signals_for_pagesdetect_agency_namesfetch_ats_install_basefetch_comparison_sidesfetch_signals_by_boardfetch_signals_for_pageload_page_configsrecord_page_job_counts
Every field we hold about a posting
This is the complete list — not a summary of it.
urlcompany_nameposted_atlocationtitlesalary_rawremote_typeyearly_salary_usdsalary_estimate_mediansourceindustryheadcountemployer_type
None of these identifies a natural person. We hold no names, email addresses, phone numbers or profiles of individuals, and there is no field in which one could be stored.
See also Method — the sample definition and pre-registered metric definitions.