DPIA
DPIA helper data flows
Core data categories, purposes, subprocessors, retention, and legal-basis notes for customers preparing their own DPIA.
Last updated: Apr 27, 2026, 10:05 AMlive registry
JSON data-flow feed| Data category | Purpose | Subprocessor | Retention | Legal basis |
|---|---|---|---|---|
| CV files and parsed profile data | Candidate profile review and matching context | Affinda | candidate_cvs — 90 days | Candidate consent and controller recruitment process |
| Evaluation outputs and model metadata | Recruiter decision support and audit | OpenRouter | interview_responses — 180 days | Legitimate interest with human oversight |
| Identity and contact data | Candidate invitation, authentication and notifications | Supabase | interview_responses — 180 days | Contract performance and legitimate interest |
| Interview transcript and responses | AI-assisted scoring and human review | ElevenLabs | interview_transcripts — 180 days | Candidate consent and legitimate interest |
| Voice, video and screen recordings | Interview capture, integrity review and evidence | Supabase | interview_recordings — 180 days | Candidate consent and controller recruitment process |