Compliance built for European and US hiring.
From GDPR and the EU AI Act to CCPA and US employment law. Candidate data stays private, and every decision stays with a person.
- EUGDPRAligned
- EUAI ActReady
- USCCPA / CPRAAligned
- GDPR ART. 28DPAAvailable on request
What each law asks, and what HireCall does.
Built for the strictest rules first, so one setup works across your hiring regions.
Personal data must be collected for a clear purpose, kept to a minimum, protected and deleted when no longer needed. People cannot be subject to decisions based solely on automated processing.
Ninety days, then the recording is gone.
What happens to a candidate’s interview from the first second of the call to deletion.
Every call opens the same way.
Before the first question, the candidate hears that they are talking to an AI, why the call is recorded and who will listen. Nothing is recorded until they agree.
- 00:00HIRECALLHi Inès, I am HireCall, an AI interviewer calling on behalf of Brasserie Lumière about the Floor Manager role.
- 00:07HIRECALLI would like to record this call so the hiring team can listen to your answers. It is stored in the EU and deleted after 90 days. A person makes the decision. Is that OK?
- 00:17INÈSYes, that is fine.
- 00:19HIRECALLThank you. The interview takes about 15 minutes. Let us start.
Eight commitments, in every contract.
- Human decisions onlyNo automated ranking, scoring or rejection.
- AI disclosed upfrontCandidates know they are talking to an AI.
- Recorded after consentNothing is recorded until the candidate agrees.
- EU data residencyRecordings and briefs stay on EU servers.
- Deleted after 90 daysRecordings are removed automatically.
- Same interview for allEqual questions, in the same order, for every applicant.
- Candidate rightsAccess and deletion requests handled on request.
- No training on your dataInterviews are never used to train models.
Documents
For your legal, security and works council reviews.
Questions from legal teams
AI used in recruitment is listed as high-risk. HireCall is designed around those obligations: human oversight, disclosure to candidates, traceable evidence and the same process for everyone.
You are the controller of your candidates’ data. HireCall acts as your processor under a GDPR Article 28 DPA.
Yes. Access and deletion requests are handled on request. Recordings are deleted automatically after 90 days in any case.
No. Interviews are never used to train models.
In the EU. Recordings, transcripts and briefs stay on EU servers.
Bring your DPO to the demo.
We will walk your legal and HR teams through the data flow, the DPA and what candidates hear.