Access controlled per company
Each company's data is kept separate. Administrators see the whole company; recruiters see only the roles assigned to them.
Data security
Where data lives, who can see it and how long it is kept.
Recrutio keeps each company's data separate, limits access to each person's responsibilities and stores candidate files in private storage.
Dublin, Ireland, EU Sessions close after one hour of inactivity Admin access protected by two-step verification
Private files
CVs, photos, reports and video recordings have no permanent public addresses. Access rights are checked before every file is delivered.
Data kept in the European Union
Data is hosted and processed in Dublin, Ireland. The application also uses specialised external services to process CVs and video interviews. The full list of sub-processors, with each one's role and region, is available on request.
Continuity and restore
We take daily backups and keep them for 14 days. A restore runs only on explicit request and is logged.
Data belongs to the company
Deactivating or deleting a user account does not delete the company's roles, candidates, assessments, interviews or reports.
People make the decision
The score helps order CVs. It never rejects or hires automatically, in line with the EU AI Act; every change in the process is a decision made by the team.
Control, traceability and clear limits
Every sensitive operation stays linked to the person who performed it and when. The log cannot be edited or deleted from the application.
Candidate data is kept for 12 months. Automatic deletion at the end of that period currently covers some data categories and is being extended to the rest. Until then, we carry out deletion requests ourselves, on request.
There is no public sign-up, public job page or public application form. The account-free flows needed for interviews use random identifiers along with status and expiry checks.
How we respond to an incident
We investigate, contain the impact, keep the information needed to clarify what happened and notify the client without undue delay when their data may be affected. Critical incidents receive an initial response within four hours.
For security questions, vendor assessment documents or to report a possible incident, email contact@recrutio.ro.