DPIA

DPIA helper data flows

Core data categories, purposes, subprocessors, retention, and legal-basis notes for customers preparing their own DPIA.

Last updated: Apr 28, 2026, 08:29 AMlive registry

Data category	Purpose	Subprocessor	Retention	Legal basis
CV files and parsed profile data	Candidate profile review and matching context	Affinda	candidate_cvs — 90 days	Candidate consent and controller recruitment process
CV files and parsed profile data	Candidate profile review and matching context	Affinda	candidate_cvs — 90 days	Candidate consent and controller recruitment process
Evaluation outputs and model metadata	Recruiter decision support and audit	OpenRouter	interview_responses — 180 days	Legitimate interest with human oversight
Evaluation outputs and model metadata	Recruiter decision support and audit	OpenRouter	interview_responses — 180 days	Legitimate interest with human oversight
Identity and contact data	Candidate invitation, authentication and notifications	Supabase	interview_responses — 180 days	Contract performance and legitimate interest
Identity and contact data	Candidate invitation, authentication and notifications	Supabase	interview_responses — 180 days	Contract performance and legitimate interest
Interview transcript and responses	AI-assisted scoring and human review	ElevenLabs	interview_transcripts — 180 days	Candidate consent and legitimate interest
Interview transcript and responses	AI-assisted scoring and human review	ElevenLabs	interview_transcripts — 180 days	Candidate consent and legitimate interest
Voice, video and screen recordings	Interview capture, integrity review and evidence	Supabase	interview_recordings — 90 days	Candidate consent and controller recruitment process
Voice, video and screen recordings	Interview capture, integrity review and evidence	Supabase	interview_recordings — 90 days	Candidate consent and controller recruitment process