Security
ISO 27001 certified. Candidate data held in the UK and EU.
How inploi handles candidate data and how our agents are held to account: the certifications we hold, where data lives, how it is encrypted, who can sign in, and what we put in front of your InfoSec team.
How we handle data
Where candidate data lives and how it is protected.
- Data protection
- Candidate data is stored in the UK and EU with no third-party data sharing outside agreed DPA scope.
- Encryption
- AES-256 at rest, TLS 1.3 in transit.
- Access
- Single sign-on with Okta, Microsoft Entra ID, Google Workspace and custom SAML.
- Certification
- ISO 27001 certified and Cyber Essentials Plus.
- Contracts
- A full Data Processing Agreement is provided as standard, setting out controller and processor roles, with a GDPR addendum available where required.
- As standard
- On request
- A security pack covering data residency, sub-processors and penetration test reports, and documentation covering our AI governance approach.
- Public sector
- G-Cloud 15 awarded supplier.
If your review needs more than this page says, the security pack is available on request. Ask for the security pack
AI safety
Agents rank and recommend. They never reject.
How the Candidate Agent and the Hiring Agent are held to account.
StudioExplainable
Every agent recommendation is explainable and auditable.
Transparent
Scoring uses transparent reasoning against the job requirements. Personal details are removed before the Hiring Agent scores an application, and scoring uses only the criteria your team sets.
Independently audited
inploi's use of AI, including the Hiring Agent and the Candidate Agent, is independently audited for fairness and accuracy by Warden.
Human decisions
Hiring decisions stay with your team, and a full audit trail of every agent action is available in Studio.
Security FAQ
inploi is ISO 27001 certified. Candidate data is stored in the UK and EU with no third-party data sharing outside agreed DPA scope. A full Data Processing Agreement is provided as standard, and a security pack covering data residency, sub-processors, and penetration test reports is available on request.
Every agent recommendation is explainable and auditable. Scoring uses transparent reasoning against the job requirements. Personal details are removed before the Hiring Agent scores an application, and scoring uses only the criteria your team sets. inploi's use of AI, including the Hiring Agent and the Candidate Agent, is independently audited for fairness and accuracy by Warden. Agents rank and recommend; they do not reject. Hiring decisions stay with your team, and a full audit trail of every agent action is available in Studio. On data protection, responsibilities are set out in a standard DPA, including controller and processor roles, with a GDPR addendum available where required. Documentation covering our AI governance approach is available on request.
In the UK and EU. Candidate data is not shared with third parties outside the agreed DPA scope. Data residency and our sub-processors are set out in the security pack, available on request.
No. Agents rank and recommend; they never reject. Every recommendation is explainable and auditable, hiring decisions stay with your team, and a full audit trail of every agent action is available in Studio.
Agents do the admin. Humans do the hiring.
See what inploi would take off your team.
The hiring experience audit takes four minutes.