We store data in the EU.
You are the controller of candidate data. Candora processes it only for your recruitment, as a processor under GDPR.
How long we keep the data
We delete a candidate's data 6 months after the recruitment process ends. The candidate gets a notice 14 days in advance and can ask for an extension. With the candidate's consent you can keep them in your candidate database for up to 5 years.
For a rejected candidate, a short record of the decision is kept for 3 years and 3 months, so you can defend yourself against a discrimination claim.
What we store and what we only read
We store the CV and the proof of education so the recruiter has them on the candidate's profile. We don't store social security, driver register or criminal record extracts. On a criminal record extract we verify only the seal and the date and don't read the content.
| Document | What Candora does |
|---|---|
| CV | Stores it, reads companies, schools and dates |
| Proof of education | Stores it, verifies the school's seal |
| Social security extract | Reads employers and dates, doesn't store the file |
| Criminal record extract | Verifies the seal and date, doesn't read the content, doesn't store the file |
| Health, religion, politics and other sensitive data | Doesn't read or extract them into candidate data. The CV file stays as the candidate sent it. |
The candidate's name
We don't send the candidate's name to public sources. The exception is a check on the individual that you turn on for a position, with a reason; the candidate gets an email about it and can decline. Processors receive the name only to run the service: storing data, reading the CV and delivering email.
Each company's data kept separate
Companies' data is kept apart by the database itself, not by the application. The database rejects any query from one company for another company's data.
Who did what
The event log shows who in your company checked what about a candidate and when. Every opening of a CV and every read of data through the API is logged too. Nobody can change the log afterwards; corrections are only appended.
Who processes the data
We store candidate data in the EU. Some suppliers are based in the US. Should data leave the EU, it is covered by standard contractual clauses or the EU-US Data Privacy Framework. A recruiter's login through Google or Microsoft goes outside the EU and contains no candidate name.
| Purpose | Where the data is | Supplier based in |
|---|---|---|
| Storage and user accounts | EU | outside the EU |
| Application | EU | US |
| Reading CV text | EU | EU |
| EU | EU | |
| Tests and operations, no candidate data | US | US |
No score, by design
Candora does not give a score or an overall verdict and doesn't reject anyone automatically, because Article 22 GDPR gives candidates, with limited exceptions, the right not to be subject to a decision based solely on automated processing. Candora provides findings with their sources, a person decides, and that decision is recorded.
What we don't do
We don't browse social media.
We check CV data against public registers and against documents the candidate uploads themselves.
We don't contact anyone about a candidate.
You write to a referee only if the candidate named them and approved the contact. You send the email with your own click.
We don't use biometrics.
We don't compare the photo on an ID document with the candidate's face.
You accept the data processing terms in the app. They list our processors by name.
Try it on a sample CV.
Your account is active as soon as you sign up. Try the Pro plan for 30 days with no card.