Skip to content
deciml

Annex 1: Processing description

Version 1.0-draft

Draft for review. These terms are not yet offered for acceptance, and marked fields are still to be completed.

Version 1.0-draft

To complete: Legal's next consolidated revision updates this Annex to expressly include client-controlled records about introduced candidates (supplement v1, section 3)

ItemAgreed scope
Subject matterHosting and operating the Customer's applicant-tracking workspace for its own recruitment
DurationFrom first authorised processing through service delivery, the restricted termination export window and completion of deletion
PurposesReceive and manage applications; permit authorised recruitment review; communicate about recruitment; support documented AI assistance; export and delete records
NatureCollection, upload, recording, organisation, storage, retrieval, review, permitted analysis/inference, transmission to authorised recipients, export, restriction and erasure
Data subjectsDirect applicants, Customer-added candidates, referees and other individuals whose details lawfully appear in permitted application materials
Data categoriesNames and contact details; CVs and supporting files; employment, education and qualifications; role preferences and application answers; recruitment correspondence, notes and stages; identifiable technical metadata; AI checklists, strengths/gaps and any authorised summaries
Sensitive dataNot intentionally requested by default; incidental CV disclosures remain protected. Intentional processing requires the additional agreement described in the DPA
Current described AIMust-have checklist and model-written strengths and gaps, using applicant information and role requirements; exact inputs, model routes, output use and storage to be verified
Future featureAI summaries for company-added candidates: not authorised until guardrails, assessment, suppliers, notice and Customer activation are complete
ExclusionsCross-client training, general model improvement, independent talent pooling, recruitment introductions and EMBEDDED_RPO unless separately documented