Hello Recruiter secures pre-seed funding to transform AI-driven hiringPre-seed funding announcedRead now

Platform

Screen

Interview

Assess

Protect

Proof

1M+candidates processed

25,000+fraud attempts detected

How fraud detection works

Works withGreenhouseAshbyRequest an integrationAll features See it on your open roles

10 interview styles. Mix them into one loop for any role.

Each one scored, with the evidence ready for your team.

All interview styles

Interview in any language24/7, in 30+ languages Build your AI interviewerSet one up in minutes

Screen at volume

Technical

Role & behavioral

Every style is scored on your rubric, with recordings and transcripts for your team.All interview styles Start free

Learn

Latest from the blog

6 Recruitment Challenges at Scale (and How to Fix Them)

US tech roles now draw about 610 applications per hire. The six challenges breaking hiring at scale, and how lean teams fix them.

14 min readOct 9, 2026

Top 10 AI Screening Software for Recruiters (2026)11 min readSep 21, 2026

Recruiting Agency Fees Are Stuck in 2005. Hiring Isn’t.11 min readAug 19, 2026 All posts

Customer story

Watch the storyHow Interspace Communications runs AI screening interviewsA two-person HR team uses ARIA to run screening interviews, score candidates and flag bad actors.Read the story

Taking an interview?Candidate helpAbout us Careers Contact System status

Home

Trust & compliance

GDPR

GDPR, UK GDPR and Hello Recruiter

GDPR-ready. Independent assessment in progress.

Under the GDPR and UK GDPR, your company is the controller of candidate data and Hello Recruiter is your processor, working under a data processing agreement. Hello Recruiter keeps a person in every hiring decision, supports candidates’ rights requests and documents its processing, so you can meet your own duties when hiring in Europe and the UK.

At a glance

Laws: EU General Data Protection Regulation (2016/679); UK GDPR and the Data Protection Act 2018
Roles: Your company is the controller. Hello Recruiter is the processor.
Contract: Data processing agreement, which org admins can accept in the product, plus a published sub-processor list
Where data is hosted: Microsoft Azure in the United States
Transfers out of the EEA and UK: Standard Contractual Clauses
Privacy contact: legal@hellorecruiter.ai
Hello Recruiter status: Ready. An independent GDPR assessment is in progress.
Last reviewed: October 2026

What the law requires

Employers that use AI to evaluate candidates in the EU or UK must:

Tell candidates what data they collect, why, for how long, and that AI is involved.
Avoid decisions based solely on automated processing that significantly affect candidates, unless an exception applies; even then, offer human intervention and a way to contest the decision.
Run a data protection impact assessment (DPIA) before evaluating candidates with AI, since it is likely to be high-risk processing.
Use processors only under a written contract with the required terms.
Collect only the data they need and keep it no longer than necessary.
Answer access, correction, deletion and objection requests, usually within one month.
Protect transfers outside the EEA and UK with an approved safeguard.
Report qualifying breaches to the regulator within 72 hours.

The UK GDPR applies equivalent rules in the UK.

How Hello Recruiter helps you comply

What the law requires	What Hello Recruiter does	What your team does
Processor contract	Offers a DPA that org admins can accept in the product, and publishes every sub-processor.	Accept the DPA.
No solely automated decisions	Sends every AI result to a person in the Human Review Center. Integrity flags also go to a person before they affect anyone.	Make sure reviewers genuinely review before deciding.
Transparency	Tells candidates up front when an AI interviewer leads the conversation, publishes an AI Disclosure, and records notices and consents in a consent ledger.	Name Hello Recruiter and AI evaluation in your candidate privacy notice.
DPIA	Gives you the facts your DPIA needs: data flows, sub-processors, bias audit and security reports. Hello Recruiter has its own DPIA for the product.	Complete your DPIA before use.
Data minimization	Scores only resume content and interview transcripts. Demographic questions are off by default and never used in scoring.	Only ask candidates for what you need.
Storage limitation	Keeps records for non-US roles 6 months and recordings 90 days by default, and you can change both.	Set retention to match your policy.
Rights requests	Supports your candidates’ access, correction and deletion requests, as set out in our DPA.	Respond within one month.
International transfers	Uses Standard Contractual Clauses for data leaving the EEA and UK.	Record the transfer in your records of processing.
Security	SOC 2 Type I complete; SOC 2 Type II, ISO 27001 and independent penetration testing underway. Reports on our trust center.	Nothing extra.
Breach notification	Notifies you of a personal data breach within 48 hours.	Notify your regulator within 72 hours where required.
Optional sub-processors	Some features with their own sub-processors are switched on only for customers who opt in.	Review them before enabling.

Common questions

Is Hello Recruiter GDPR compliant?
Hello Recruiter is GDPR-ready. It acts as a processor under a data processing agreement, publishes its sub-processors, supports data subject rights and uses Standard Contractual Clauses for transfers. An independent GDPR assessment is in progress.
Is Hello Recruiter a controller or a processor?
A processor. The employer decides why and how candidate data is used and is the controller.
Does Hello Recruiter make solely automated decisions under Article 22?
No. A person reviews every AI result and makes the decision. Whether your process counts as solely automated depends on how your reviewers use the results.
Where is candidate data stored?
On Microsoft Azure in the United States. Transfers from the EEA and UK rely on Standard Contractual Clauses.
Do we need a DPIA to use Hello Recruiter?
Usually yes, because evaluating candidates with AI is likely high-risk processing. Hello Recruiter gives you the information your DPIA needs.
Does Hello Recruiter use candidate data to train AI?
Hello Recruiter trains its AI models only on anonymized data, never on identifiable candidate data, as described in our Privacy Policy. EU enterprise customers can opt out of having their candidates’ data included.
How long does Hello Recruiter keep candidate data?
For roles outside the US, 6 months by default, and interview recordings 90 days. Your organization can change these settings.

See the audit paperwork

Our DPA, sub-processor list, SOC 2 report and security policies are on the trust center.

Visit the trust center

Other AI hiring laws

This page explains how Hello Recruiter supports compliance. It is not legal advice. Your obligations depend on where you hire and how you use Hello Recruiter, so confirm them with your counsel. If this page differs from our legal documents, the documents govern.