Your candidates' data, treated like it matters.
AgentLink screens people, not just resumes — so we hold ourselves to a higher bar on privacy, transparency, and auditability. Here is exactly how your data and your candidates' data are protected.
Encryption everywhere
All data is encrypted in transit with HTTPS/TLS and at rest in PostgreSQL. Payment credentials are handled by Dodo Payments — we never store raw card data.
Strict access scoping
Campaign data is scoped per account: recruiters can only access campaigns they own. Internal access is role-restricted, and secrets are never stored in plaintext.
Every AI decision is auditable
Each resume score, voice-screen transcript, and QA verdict carries a written justification linked to your JD rubric. Nothing is a black box — you can inspect the evidence behind every advance or reject.
Human in the loop
AI never makes a final hiring decision. You approve every campaign and its cost before launch, and you review the ranked shortlist. Rejected candidates can be manually re-advanced at any time.
Candidate consent & disclosure
Candidates are told they are speaking with an AI agent and that calls are recorded, at the start of every voice screen. Candidate data is used only for the campaign they applied to — never for advertising, never sold.
Data rights & retention
Campaign data is retained for the campaign plus 12 months. Candidates and recruiters can request deletion at any time and we process requests within 30 days, in line with GDPR principles.
Operational practices
- Session-based authentication with server-side authorization on every request
- Rate limiting and abuse prevention on all public endpoints
- Voice recordings and transcripts accessible only to the campaign owner
- Model training only on aggregate, de-identified data — never on identifiable candidate data without explicit consent
- Full pipeline audit trail: every candidate stage change, score, call, and email is logged and visible in your dashboard
- SOC 2 readiness program in progress
For the full detail on what we collect and how it is used, read our Privacy Policy. Security questions, disclosure reports, or data requests: [email protected].