Log into Canvider with your email or username and password.
Why it exists Secure entry point to your company's recruitment workspace.
Canvider stores CVs, contact details, salary expectations and candid internal hiring notes — data that is commercially sensitive and legally protected. Signing in does more than unlock the app: it establishes which employer's data you are permitted to see for the rest of the session, which is the foundation the whole multi-tenant system rests on. The math "Security Check" below the password field is a lightweight bot challenge that stops automated credential-stuffing scripts before they ever reach the password comparison, which is why you see it even though you are a legitimate user.
How to use it
Go to the Canvider sign-in page (/signin/).
Enter your Email Address (or username) in the first field.
Enter your Password.
Solve the "Security Check" math question shown below the password field.
Optionally tick "Remember me" to stay signed in.
Click the "Sign In" button.
Good to know
Either your email address or your username works in the first field — both resolve to the same account.
"Remember me" keeps you signed in for longer. Leave it unticked on shared or public machines.
Five failed attempts lock the account for 30 minutes, so use "Forgot password?" instead of guessing repeatedly.
Teammate accounts are invitation-only — an administrator at your company invites you. (New companies create their workspace via canvider.com/signup.)
Account locks temporarily after repeated failed sign-in attempts.
Why it exists Blocks password-guessing attacks against your account.
Recruitment accounts are attractive targets because they contain thousands of verified names, emails and phone numbers — ideal raw material for phishing and identity fraud. The single cheapest attack against any login page is to try common passwords against a known email address thousands of times. A temporary lockout makes that attack economically pointless: an attacker who can only make five guesses per half-hour will never work through a password list. The cost to you is a mild inconvenience on the rare occasion you genuinely forget your own password.
How to use it
No setup needed — this is always on.
After 5 failed sign-in attempts, your account is locked for 30 minutes.
Wait for the lockout to expire, or use "Forgot password?" to reset your password.
Sign in again with the correct credentials.
Good to know
The lockout is time-based and clears itself — no administrator has to unlock you.
Resetting your password via email clears the lockout immediately, so it is the faster route.
A separate rate limit also caps login attempts at 5 per hour per client, independently of the account lockout.
Repeated lockouts you did not cause are a signal someone is targeting your address — tell your administrator.
Why it exists Regain access without contacting an administrator.
Password resets are the single most common support request in any business tool, and every one that requires a human administrator costs both people time and creates a social-engineering risk — "I'm locked out, can you just reset it for me?" is the oldest attack in the book. Self-service reset over verified email removes both problems: proof of identity is possession of the mailbox, which is something an attacker outside your company does not have. It is also the fastest way out of a lockout.
How to use it
On the sign-in page, click "Forgot password?".
Enter your Email Address.
Solve the "Security Check" math question.
Click "Send Reset Link".
Open the password reset email in your inbox and click the link inside.
Good to know
Use the email address on your Canvider account — a reset for an unknown address will not arrive.
The link is time-limited. If you leave it too long, simply request a new one.
Check spam or quarantine folders if the message does not appear within a few minutes.
Requesting a reset is also the fastest way to clear an active 30-minute lockout.
Set a new password using a time-limited emailed link.
Why it exists Restores account access with a strong, validated password.
This is the second half of the forgot-password flow, and it is where password quality is actually enforced. The strength meter and the explicit requirement list exist because the most common cause of a compromised ATS is not a clever exploit but a reused or weak password. The link is deliberately short-lived: a reset link sitting in an old mailbox forever would be a permanent back door into your candidate database.
How to use it
Click the reset link from your email to open the Create New Password page.
Type your New Password — watch the "Password Strength" meter.
Meet all requirements: 8+ characters, uppercase, lowercase, number, special character.
Re-type it in "Confirm New Password" and wait for "Passwords match!".
Click "Reset My Password".
Click "Back to Sign In" and log in with the new password.
Good to know
All five requirements must be met — 8+ characters, uppercase, lowercase, number and special character. The submit button stays inactive until they are.
The link expires. If it has, go back to "Forgot password?" and request a fresh one.
Reset links are single-use; a used link will not open the form again.
Do not reuse a password from another service — credential reuse is the most common route into business accounts.
New teammates create their account from an emailed invitation.
Why it exists Onboards colleagues by invitation, never by open signup.
Inside a company workspace, Canvider deliberately has no open "join this company" signup. If anyone could create an account and attach themselves to a company, candidate data would be one guessed company name away from a stranger. Invitation-only registration inverts that: an existing administrator decides who joins and, critically, what role they get, before the account exists at all. The email address is locked on this screen precisely so an invitation for one person cannot be redirected to another.
How to use it
Open the invitation email from your company and click the invitation link.
Review the "Accept Invitation" page showing your name, company, and assigned role.
Your email address is pre-filled and cannot be changed.
Enter "Create Password" (minimum 6 characters).
Re-type it in "Confirm Password".
Click "Complete Registration".
You are redirected to the registration-complete page — now sign in.
Good to know
The role shown on this page was chosen by whoever invited you and determines what you can access from day one.
Invitations carry an expiry date. If yours has lapsed, ask your administrator to send a new one.
The email address cannot be edited here by design — ask for a fresh invitation if it is wrong.
Registration does not sign you in automatically; go to the sign-in page afterwards.
View and edit your personal and company information.
Why it exists Keeps your recruiter identity accurate across the system.
Your profile is not decoration — it is the identity Canvider attaches to everything you do. Your name appears on internal comments, in the activity feed, on uploaded files and in @mention autocompletes, and your email is what teammates see when they need to chase you about a candidate. A stale profile (wrong department after a team move, an old phone number) quietly degrades every one of those touchpoints, which is why it is worth a two-minute check when you join and after any internal change.
How to use it
Click your avatar in the top-right of the navigation bar.
Choose "Profile" from the dropdown.
Review Account details: Last Login and Account Created.
Edit First Name, Last Name, Email, Phone under "Personal Information".
Edit Company, Position, Department under "Company Information".
Click "Save Changes".
Good to know
"Last Login" is a useful self-check: an unfamiliar time or date is worth reporting to your administrator.
Your name here is what appears on comments, mentions and file uploads across the app.
Changing your email here changes where account notifications are delivered.
This page edits you, not your company's public branding — that lives under Careers Page & Workloupe.
Why it exists Makes comments, activity and mentions easier to recognise.
In a shared pipeline, several recruiters comment on the same candidates, and reading a wall of similar-looking text attributions is slow. Avatars turn that scanning problem into instant pattern recognition — you spot your hiring manager's note in a thread without reading a single name. It is a small feature with an outsized effect on teams of more than three or four people working the same jobs.
How to use it
Open your Profile page from the avatar dropdown.
Click the "Change Photo" button.
In the "Upload Profile Photo" modal, click "Choose a photo (PNG or JPEG only)".
Select an image file from your computer.
Click "Upload".
Good to know
Only PNG and JPEG are accepted; other formats are rejected by the upload validator.
Uploads are checked by file signature, not just extension, so a renamed file will not pass.
A roughly square image works best — wide photos get cropped in the circular avatar frame.
This photo is internal to your team; it is not shown to candidates.
Why it exists Lets you rotate credentials without an email reset.
There is a category of moment where you need a new password immediately and the email round-trip is exactly the wrong tool: you typed your password into the wrong window, a colleague watched you type it, or you are following a company rotation policy. Requiring the current password before setting a new one also protects you against the classic unattended-laptop attack — someone at your desk cannot silently take ownership of your session by changing the password.
How to use it
Open your Profile page from the avatar dropdown.
Click the "Change Password" button.
Enter your Current Password.
Enter your New Password.
Enter it again in "Confirm New Password".
Click "Change Password".
Good to know
You must know your current password. If you do not, use "Forgot password?" from the sign-in page instead.
Use this immediately if you suspect your password has been seen or shared.
The same strength rules that apply to a reset apply here — pick something long and unique.
Switch the entire interface between English, Turkish and Polish.
Why it exists Lets each recruiter work in their preferred language.
Canvider is used by teams hiring across several countries, and the person screening CVs in Warsaw should not have to work in a second language to do it. The setting is per-user rather than per-company, so a Polish coordinator, a Turkish sourcer and an English-speaking hiring manager can all use the same workspace and the same candidate records in their own language. Note that this changes the interface, not your candidate-facing content — job descriptions and emails stay exactly as you wrote them.
How to use it
Go to Settings → Preferences.
Click the "Language" tab in the left sidebar.
Under "Interface Language", review the list of available languages.
Click the language you want (the current one is marked "Current").
The page reloads in the selected language.
Good to know
The choice is personal — changing it does not affect your teammates' interfaces.
Job descriptions, email templates and candidate data are not translated; only Canvider's own labels and buttons change.
Supported languages are English (default), Turkish and Polish.
The page reloads on switch, so save any in-progress form before changing it.
Central page listing all Canvider legal and compliance documents.
Why it exists Gives fast access to terms, privacy and AI-usage policies.
Anyone processing candidate data will eventually be asked to prove how it is handled — by their own legal team, by a client, by a security questionnaire, or by a candidate exercising a data-subject request. Hunting for a DPA in an old email thread at that moment is a bad experience. Collecting every document in one predictable place turns those requests into a link you can send in seconds. The AI FAQ is here for the same reason: candidates and works councils increasingly ask specifically how AI is used in screening.
How to use it
Navigate to the Legal Documents page (/legal-documents/) or use the footer link.
Click "Terms of Service" to read the service agreement.
Click "Privacy Policy" to read data handling rules.
Click "Data Processing Agreement" for the DPA.
Click "FAQ on Data & AI Usage" for AI-specific answers.
Good to know
The Data Processing Agreement is the document your legal or procurement team will normally ask for.
The "FAQ on Data & AI Usage" is the right answer when a candidate asks whether AI screened them.
Bookmark this page if you handle vendor security reviews — it is the fastest source for those answers.
Why it exists Protects your account on shared or public computers.
Recruiters work from laptops in coworking spaces, client offices and shared interview rooms, and a Canvider session left open exposes every candidate's contact details and every internal note about them to whoever sits down next. Closing the browser tab does not reliably end a session — especially with "Remember me" enabled — so explicit sign-out is the only dependable way to end access. It is the single highest-value security habit in the product.
How to use it
Click your avatar in the top-right of the navigation bar.
Click "Sign Out" at the bottom of the dropdown menu.
You are returned to the sign-in page.
Sign in again whenever you want to resume work.
Good to know
Closing the tab is not the same as signing out — the session can survive until it expires.
This matters most when you ticked "Remember me" at sign-in.
Signing out on one device does not affect your other devices.
Deactivated users see an explanatory page instead of the app.
Why it exists Prevents access while explaining what happened.
When someone leaves a team, their access has to stop immediately — but silently failing their login would generate a support ticket and a confused colleague. This page resolves the tension: access is genuinely cut off (they see no jobs, no candidates, no data), while the person still gets a clear explanation and a next step. It also covers temporary situations like a long leave of absence, where the account is meant to come back rather than be destroyed.
How to use it
If your account was deactivated, signing in redirects you here automatically.
Read the notice explaining that access has been suspended.
Contact your company administrator to be reactivated.
Once reactivated, sign in again normally.
Good to know
Deactivation is reversible — no data is deleted and reactivation restores access as it was.
Only an administrator at your own company can reactivate you; Canvider support cannot do it for them.
Deactivated users are removed from @mention autocomplete, so teammates stop tagging someone who cannot reply.
Deactivation takes effect immediately, including for a user who is currently signed in.