What is AstraStaff AI?

AstraStaff AI is an autonomous AI recruiting platform that replaces traditional staffing agencies. It sources candidates, runs real GPT-4o AI screening interviews, masks personally identifiable information until a contract is signed, and automatically bills $1,000 per successful hire via Stripe — with no upfront fee and a 30-day replacement warranty.

How much does AstraStaff AI cost?

AstraStaff AI charges a flat $1,000 per successful hire. There is no upfront cost, no monthly subscription, and no percentage-based commission. Traditional recruiting agencies charge 18–25% of the hire's first-year salary — typically $12,000 to $20,000 per hire. A SaaS tier is available at $499/month for high-volume in-house teams.

How does AstraStaff AI compare to a traditional recruiter or staffing agency?

Traditional recruiters charge 15–25% of first-year salary (roughly $12,000–$20,000 per $85K hire), take 5–14 days to produce a shortlist, and require sending candidate PII to third-party recruiters. AstraStaff AI charges $1,000 flat, produces a shortlist in under 24 hours, and never exposes candidate PII until the hiring contract is signed and paid.

Does AstraStaff AI actually conduct real AI interviews?

Yes. AstraStaff uses OpenAI GPT-4o to run structured screening interviews with each candidate, asking questions about availability, salary expectations, achievements, and role-specific technical topics. The AI produces a 60–99 score and a 2-sentence assessment used to rank candidates in your Vault.

How does the pay-per-hire billing work?

You attach a credit card during signup via Stripe (SetupIntent, no charge). Candidates enter your pipeline with masked names, emails, and phone numbers. When you sign a placement contract for a candidate, the system triggers a real off-session $1,000 Stripe PaymentIntent on your saved card, unmasks the candidate's full contact details, and moves them to your "Ready to Deploy" stage.

Is candidate data safe with AstraStaff AI?

Yes. AstraStaff AI applies server-side PII masking — candidates' real names, emails, and phone numbers never leave the server for unpaid candidates. The wire response only contains ████████ placeholders until the placement is paid. Sessions use HttpOnly cookies with token-version invalidation, and two-factor authentication (TOTP + backup codes) is available on every account.

Can AstraStaff AI hire for non-technical roles?

Yes. AstraStaff AI hires for any professional role: sales AEs, product designers, product managers, growth marketers, revenue operations, customer success, executive assistants, and more. You paste a job description and the AI generates candidate personas or scrapes real profiles from LinkedIn URLs, GitHub, or any recruiter URL you provide.

What is the replacement warranty?

Every $1,000 placement includes a 30-day replacement warranty. If the hired candidate leaves within 30 days of start date, AstraStaff AI sources a replacement at no additional cost.

How is AstraStaff AI different from LinkedIn Recruiter or an ATS like Greenhouse?

LinkedIn Recruiter and ATS platforms (Greenhouse, Lever, Ashby, Workable) are tools your human recruiters use to organize candidates. You still pay the recruiters. AstraStaff AI replaces the recruiters. It runs the full pipeline — sourcing, AI screening, ranking, contract drafting — autonomously.

Can I try AstraStaff AI without paying?

Yes. AstraStaff AI offers a free "Test Drive" at astrastaffai.co/test-drive — you interview yourself with Astra (our GPT-4o AI recruiter) in the browser for 2 minutes with no signup or credit card required. Additionally, the free tier lets you build your pipeline and only charges when you actually place a hire.

security & trust

Your data. Locked down.

AstraStaff AI treats your candidate pipeline and payment methods as the crown jewels. Here is exactly what protects them.

Server-side PII masking

Candidate names, emails, and phone numbers are replaced with ████ placeholders on the server before any response leaves our infrastructure. Raw PII is never sent to your browser for candidates you have not paid to unlock. This is provable: the /api/admin/masking-proof endpoint shows the raw record on the server vs. what shipped over the wire.

Session security

Sessions use HttpOnly, Secure, SameSite=Lax cookies signed with HS256 JWTs. Every user has a token_version counter that is incremented on password change and 2FA recovery — old sessions are killed instantly across every device.

Two-factor authentication

TOTP-based 2FA (compatible with Google Authenticator, Authy, 1Password) is available on every account. Ten single-use backup codes are hashed with SHA-256 at rest. Emergency email recovery is rate-limited to 5 attempts per hour per IP.

Multi-tenant isolation

Every candidate, charge, and job is stored with a strict organization_id filter. Cross-tenant queries are blocked at the API layer. All privileged endpoints verify the JWT-embedded org matches the resource’s owner.

Payments (Stripe)

Card data never touches our servers. Stripe Elements collects card details client-side and returns only a PaymentMethod ID (pm_…). All charges use off-session Stripe PaymentIntents. Stripe is PCI-DSS Level 1 certified.

Rate limiting & abuse controls

Public endpoints (auth, signup, password reset, 2FA verify, recovery) are rate-limited by IP with sliding windows. Bcrypt with 10 rounds is used for password hashing. TOTP verification allows ±30s clock drift.

Compliance

GDPR / CCPA: Candidates and users may request data deletion at privacy@astrastaffai.co.
SOC 2 Type 1: Kickoff in progress (targeting Q4 2026).
Data Processing Agreement (DPA): Available upon request for Enterprise customers.
Data residency: All data hosted in US-East (MongoDB Atlas).

Reporting a vulnerability

Found a security issue? Please responsibly disclose to security@astrastaffai.co. We respond within 24 hours and never take legal action against good-faith researchers.