ExactMark

For recruiters and executive search firms

A leaked shortlist can end a search. Trace it to the most likely source.

Shortlists, candidate profiles, client briefs, compensation expectations and succession plans circulate among hiring committees and client stakeholders. ExactMark gives each committee member a recipient-linked copy and each client-portal session a covert signal. When a screenshot reaches a candidate's current employer or a rival firm, Evidence Lab ranks the committee copies and names the most likely source, or tells you honestly that the result is inconclusive.

Protect your shortlists See how it works
  • One copy per committee memberA single shortlist PDF becomes a distinct, recipient-linked copy for the chair, the CHRO, the board observer and the client CEO.
  • Client portal protectedOne script tag gives every signed-in client session a covert, session-specific signal.
  • Attribution or inconclusiveA most likely source with a confidence score and ranked candidates, or an honest inconclusive result.
  • Discretion by designIdentifiers can be pseudonymised, the mapping stays with your firm, and only submitted evidence files are ever received.

The problem

Confidentiality is the product. A screenshot breaks it in seconds.

A search lives or dies on discretion. Candidates trust you not to expose them to their current employer; clients trust you not to reveal a succession plan or a compensation range. Yet the shortlist has to be shared: with a hiring committee of five, a client CEO, an HR partner, sometimes a board observer.

One screenshot of the shortlist page, one forwarded PDF, and a candidate hears about it from their own chief executive. The candidate withdraws, the client questions your process, and you have no way to say which committee member's copy it was.

The ExactMark answer

Every copy accounted for.

ExactMark does not lock the file or block the screenshot. It gives each committee member a copy that carries a covert spatial signal plus signed, non-identifying metadata and an opaque filename reference, and gives each client-portal session its own session-specific signal.

When a leaked image appears, Evidence Lab correlates it against the candidate copies and sessions and reports the most likely source with ranked candidates, or an inconclusive result, along with a branded PDF evidence report. Committee members who know copies are individually traceable handle them with more care.

See the three steps

How it works

Three steps from shortlist to answer.

  1. 1

    Imprint the shortlist

    Upload the shortlist, candidate profile or client brief as PDF, PNG, JPG or WEBP to ExactMark Imprint. Name each committee member, or import a CSV of up to 100 recipients. Download the copies individually or as a ZIP. PDFs keep their original content and text.

  2. 2

    Protect the client portal

    Add one script tag to your client portal and call exactmark.identify(...) for the signed-in stakeholder. ExactMark renders a low-opacity, session-specific signal over the shortlist pages. The SDK never captures or records the page.

  3. 3

    Submit the leak to Evidence Lab

    Upload the screenshot or forward it to your Web App's private evidence email address. The detector normalises the image, searches across crop, scale, rotation, colour and compression, and returns an attribution with ranked candidates, or an inconclusive result.

Capabilities

Built for firms that trade on discretion.

ExactMark Imprint

Workspace-level tool for recipient-linked copies of shortlists, profiles, briefs and succession documents. Bulk up to 100 recipients via CSV, individual or ZIP download.

Web Sessions

A single script tag protects your client portal with a covert, redundant tiled signal per signed-in session. Visible and combined modes are available.

Evidence Lab

Upload or email a leaked screenshot or PDF. Cases keep workflow state, notes and the original asset, and produce a downloadable branded PDF evidence report.

Team roles and per-Web-App access

Owner, Admin, Developer, Analyst and Viewer roles with invitations, so each practice or client account sees only its own Web Apps.

Privacy and EU hosting

Pseudonymise viewer identifiers and keep the mapping in your firm. Hosted in Dublin with Supabase in Ireland; forensic data encrypted with application-level AES-256-GCM.

Lighthouse

Optional network and session intelligence for protected sessions: VPN, proxy or Tor indicators, provider, coarse location and changes from earlier sessions. The raw IP address is never stored.

FAQ

What search partners ask before they start.

Does ExactMark stop a committee member from screenshotting the shortlist?

No. It is an attribution and deterrence product, not DRM, screenshot prevention or spyware. It tells you which committee copy or portal session a leaked image most likely came from, and says so plainly when the evidence is inconclusive.

Will the client see a mark on the shortlist?

Not by default. The signal is a low-opacity, redundant tiled pattern that is not designed to be noticed, and PDFs keep their original content and text. A visible mode exists if you want committee members reminded that copies are traceable.

Can we avoid putting candidate or client names into ExactMark?

Yes. Recipient and viewer identifiers can be pseudonymised, and the mapping from pseudonym to person can stay inside your firm. The only files ExactMark receives are the evidence files you submit.

What if the screenshot was cropped or sent through a messaging app?

The detector searches across crop position, continuous scale, small rotation, colour, brightness and compression, so screenshots at other resolutions, browser zoom, resizing and messaging-app recompression are typical inputs. Where there is not enough signal, Evidence Lab returns an inconclusive result rather than a guess.

Where is our data hosted and who can see it?

ExactMark is hosted in Dublin (EU) with Supabase in Ireland, and forensic data is protected with application-level AES-256-GCM encryption. Access inside your workspace is governed by Owner, Admin, Developer, Analyst and Viewer roles with per-Web-App access.

Keep the search confidential, and know where to look if it is not.

Self-serve sign-up, USD plans through Stripe Checkout and a one-time testing plan for your next mandate.

Get started Talk to us