Security & privacy

Candidate data, handled with care

Assessment transcripts and scores are sensitive personal data. Our defaults are EU hosting, data minimization, clear retention, and candidate rights — with no third-party model training on your data.

Principles

How we treat data

EU-hosted

Application and database run on EU infrastructure, keeping candidate data within the region by default.

Data minimization

We collect what an assessment needs — the simulation transcript and resulting scores — and no more. No résumé harvesting, no demographic capture for scoring.

No model training on your data

Your candidates' transcripts are not used to train third-party AI models. AI providers are used as processors under agreement, not as data buyers.

Encrypted in transit

All traffic is served over HTTPS/TLS; sensitive keys stay server-side and never reach the browser.

Access-controlled

Recruiter accounts see only their own campaigns and candidates; server-authoritative checks enforce ownership on every request.

Defined retention

Assessment records are retained to support auditability and then deleted on a defined schedule or on request.

Candidate & data-subject rights

Under GDPR and comparable laws, individuals have rights over their personal data. hire.center supports the employer (as controller) in honoring them:

  • Transparency & consent — candidates are told the assessment is AI-assisted and advisory, and consent before starting.
  • Access & portability — a candidate's assessment record can be retrieved and provided.
  • Correction & deletion — records can be corrected or erased on request, subject to legal retention limits.
  • Human oversight — because a person makes the decision, candidates are not subject to a solely automated decision.

Processors & sub-processors

We use a small set of vetted infrastructure and AI processors to run the service (hosting, payments, and the language-model provider that powers the simulation and scoring). Each operates under a data-processing agreement. A current sub-processor list and Data Processing Addendum are available to customers on request as we finalize them for general publication.

Payments

Billing is handled by our payment provider using their hosted, PCI-compliant checkout. Card details are entered directly with the provider — hire.center never sees or stores full card numbers. Credits are granted only by a signature-verified webhook from the payment provider, so balances can't be minted from the browser.

Privacy-respecting hiring assessment

EU-hosted, data-minimal, and advisory by design.