Security and data protection for EU hiring teams
Hyre-Inc is hosted in the EU, in Germany. Each company works in its own private workspace, every stage move is logged with who or what made it, consent is tracked per candidate, and retention timers delete old data. Hyre-Inc does not scrape LinkedIn, buy contact data or harvest email addresses.
Updated:
Where your data lives
Hyre-Inc runs on servers in Germany, inside the EU. Candidate profiles, CVs, assessment answers, video recordings and the activity log are stored there.
Each company gets its own private workspace. Each company's data is kept in its own database, so your candidates never mix with anyone else's, and colleagues only get in when someone in your workspace invites them.
Uploaded files, such as CVs and video answers, are encrypted at rest. The database and uploaded files are backed up every night, and the backups are encrypted before they are stored, with an off-site copy kept apart from the main server. All traffic to Hyre-Inc uses HTTPS, and browsers are told to refuse plain HTTP connections.
Hyre-Inc uses a small number of service providers to run, for example the hosting provider and Google for sign-in and calendar booking. The full list is below.
Candidate consent, retention and deletion
Hiring software holds personal data about people who never signed a contract with you, so it has to be careful by default. In Hyre-Inc:
- Consent is tracked per candidate, so you can see what each person agreed to and when.
- Retention timers delete old data automatically, instead of keeping every CV forever.
- Candidates can ask for their data to be deleted, and you can delete it on request.
- Opting out of outreach takes one click, and that person is never contacted again.
- Video interviews ask for consent to the recording before anything is recorded.
When your company uses Hyre-Inc to hire, your company decides why and how candidate data is used, and Hyre-Inc processes it on your behalf. If you need a data processing agreement, email access@hyre-inc.com.
Security at a glance
| Topic | How Hyre-Inc handles it |
|---|---|
| Hosting | EU, in Germany |
| Workspaces | One private workspace per company, each with its own database |
| Access | Colleagues join by invite; team actions land in a shared activity log |
| Audit trail | Every stage move logged with who or what made it, and why |
| Encryption | HTTPS for all traffic; uploaded files encrypted at rest; encrypted nightly backups with an off-site copy |
| Consent | Tracked per candidate |
| Retention | Timers that delete old data |
| Deletion | On request |
| Contact data | No LinkedIn scraping, no bought lists, no email harvesting |
An audit trail for every decision
Each stage move is logged with who or what made it, a person or Autopilot, and the reason. If Autopilot moved a candidate from the assessment to the interview, the log shows the score and the bar. If a recruiter overrode a score, the log shows their name and their note.
That record is useful well beyond security. It answers a candidate who asks how a decision was made, it helps a new team member understand a round they did not start, and it lets you check that automatic steps behave the way you intended.
Hyre-Inc's AI is built to be explainable. Every sourcing fit score rests on quoted lines from public pages, and every CV score shows its reasons. Video answers are reviewed on content, never on face, accent or tone, and assessment integrity flags go to a person rather than rejecting anyone. A human approves finalists and every hire.
Service providers
These are the companies that process data on Hyre-Inc's behalf so the service can run. We list them so you can include them in your own records.
- Hetzner: hosting. The servers that run Hyre-Inc and store your data are in Germany.
- Google: staff sign-in, sending email from your connected Gmail, and Google Calendar booking.
- Anthropic: the AI features, such as scoring and drafting.
- Cloudflare: storage for the encrypted off-site backup copy.
If your company sends security questionnaires to new suppliers, send it over and we will fill it in. Questions about security, data protection or a security review for your company? Email access@hyre-inc.com and we will answer them directly.
Questions about security and data
Where is Hyre-Inc hosted?
In the EU, on servers in Germany. Each company gets its own private workspace with its own database, and your candidates never mix with anyone else's.
How do you handle consent and candidate data?
Consent is tracked per candidate, retention timers delete old data, and candidates can ask for their data to be deleted. Every stage move is logged with who or what made it. Each company gets its own private workspace with its own database, hosted in the EU (Germany).
Do you scrape LinkedIn?
No. Hyre does not scrape LinkedIn, does not buy contact data and does not harvest email addresses.
Does the AI make hiring decisions?
No. A person decides. Autopilot moves people through the early steps against the bars you set and logs every move. A human approves finalists and hires, and any automatic move can be overridden.