About this plugin
Vakanssi is a complete applicant tracking system (ATS) for WordPress: branded job listings with Google-for-Jobs
structured data, a native application form, an applications inbox with a configurable drag-and-drop
pipeline board, templated emails, and tools for handling candidate data (export, erasure and
scheduled retention), all on your own server, with no per-seat SaaS fees.
A complete hiring workflow:
- Jobs & careers: a vakanssi_job post type, a branded careers archive (at /jobs/ by default, or on
your own careers page) and [vakanssi_jobs] shortcode, and valid Google-for-Jobs JobPosting structured data that is
withheld automatically when a job is not eligible (expired, no location, no apply path, …).
- Application intake: a native application form with a secure CV upload (type-verified by magic
bytes, randomised filename, owner-only permissions), spam/honeypot/rate-limiting, and candidate
de-duplication by email.
- Applications inbox & pipeline board: a sortable, filterable inbox plus a build-free React
Kanban board with a candidate profile drawer; configurable stages; bulk move/delete.
- Interviews & calendar invites: schedule an interview from the candidate’s record and send a
ics invite that Google, Outlook and Apple render as an actionable event, with no OAuth and
no connected account. Reschedule, cancel, and keep internal notes that reach your interviewers’
calendars and never the candidate’s.
- Application data & export: export applications to CSV, print or save any application as a PDF, and edit application details, right from the inbox.
- Email: templated confirmation/recruiter/rejection/offer emails with personalization tags and
an SMTP-compatible sender, logged and de-duplicated.
- Candidate data controls: consent capture, WordPress core data export/erase integration (with a
complete cascade across all candidate data), a retention-purge cron, and an audit log. These are
tools you operate; they do not by themselves make a site compliant with any particular law.
- Blocks, page builders & themes: a Job Listings block for the block editor, native Elementor
widgets for the listing, the application form and the job details (Elementor Pro Theme Builder
archive/single templates are respected too), a Divi module, and shortcodes for everywhere else.
7 and later get editable Site Editor templates; classic themes get the
built-in archive.
- First-run setup wizard: sender identity and a careers page in a few clicks, with optional
sample content and a prompt to post your first job.
- Foundations: scale-ready custom tables (engineered for 10k+ applications), a modular
architecture (disabled modules load no code/assets), capability-based roles (Recruiter, Hiring
Manager, HR/Compliance), and a vakanssi/v1 REST API with per-route
permission checks.
External services
Vakanssi does not contact any external service on its own. Everything it stores stays on
your server. One optional integration talks to a third party, and only after you switch it
on and enter your own credentials:
Cloudflare Turnstile (optional spam protection for the public application form)
Turnstile is off by default. It activates only once you enter a Turnstile site key and
secret under Hiring → Settings → Application form. While it is enabled:
- each visitor’s browser loads the challenge script from
js;
- when someone submits an application, the resulting challenge token, the visitor’s IP
address and your secret key are sent to
com/turnstile/v0/siteverify so Cloudflare can confirm the
submission is not automated;
- when an administrator uses “Test these keys” on the settings screen, that admin’s browser
loads the same challenge script, and the resulting token, the admin’s IP address and the
secret key being tested are sent to the same address, so the key pair can be checked
without waiting for a real application.
No application content (no name, email, CV, or answers) is sent to Cloudflare. Turning the
setting off stops all contact with the service.
com/products/turnstile/
com/terms/
com/privacypolicy/