Trust & Compliance

How we protect personal data · Last updated: 2 November 2026

ICO registered · ZC110377UK GDPRSigned sub-processor DPAsTransfer Risk AssessmentsHuman-in-the-loop AI

At a glance

  • Personal data is encrypted in transit (TLS, HSTS) and at rest (AES-256).
  • Our AI supports decisions; it never makes them. A person reviews outcomes.
  • Roles vary by relationship: for people who sign up directly we are the controller; for recruiters and institutions placing their own candidates, they are the controller and we are the processor.
  • Core hosting, storage and AI providers are in the USA, covered by the UK–US Data Privacy Framework or Standard Contractual Clauses, each supported by a Transfer Risk Assessment.
  • You can access, correct, export or delete your data, and data is deleted or returned on exit.

Published documents

Available now to read:

Privacy PolicyTerms of ServiceData Processing Addendum

Available on request

Plain-English summaries we share with customers and partners – ask and we will send them:

  • Data Handling Summary (for education institutions)
  • Data Protection Impact Assessment – summary
  • Service Level Summary
  • Accessibility Statement

The full supporting documents are available to a customer or partner’s data-protection office on request, under NDA:

  • Full Data Protection Impact Assessment and AI Act technical file
  • Record of Processing Activities
  • Transfer Risk Assessments
  • Signed sub-processor Data Processing Agreements
  • Application security assessment summary

Request the pack

For any of the documents above, or to start a security and data-protection review, contact us and we will provide a private, access-controlled link.

Request documents