Roles and responsibility for data
In the intended recruiting workflow, the employer is the controller and Vencur acts as processor. The employer decides why data is collected and what the hiring process requires. A data processing agreement is planned for pilot teams; its final terms must be reviewed and signed before use.
An employer’s data remains associated with that employer. Export should be available at any time. After cancellation, a 30-day read-and-export period is planned before deletion, unless a legal retention duty applies.
Hosting and applicant data
The website and database are hosted in the EU (Europe region). This statement covers website and database hosting only. It does not claim that AI processing also takes place in the EU; the providers and any transfers used for a particular pilot must be disclosed.
Applicant data is intended to be deleted after six months, with a shorter configurable period for the employer. Applicants should be informed before an interview and have clear routes to request access or deletion.
Controls to validate in the pilot
| Measure | Status |
|---|---|
| Role definition, data agreement and applicant consent | Planned for pilot teams |
| Export and 30-day read access after cancellation | In development |
| Six-month deletion, configurable | In development |
| Logging and simple outage alternative | Pilot validation needed |
Applicants should be informed and give consent before a conversation. Questions should be limited to what a role needs; prohibited or discriminatory questions are not acceptable. If the service is unavailable, applicants need a simple form or another manual contact route. This page is not legal advice.
Last updated: 7 October 2026
Frequently asked questions
Where are the website and database hosted?
The website and database are hosted in the EU, in the Europe region. This does not state where AI processing takes place.
Who is responsible for applicant data?
In the intended setup, the employer is the controller and Vencur is the processor. A data processing agreement will set out the roles for each pilot.
How long is applicant data kept?
Deletion after six months is planned, with a shorter period the employer can configure. The capability is still in development.
Can an employer export its data?
Export at any time and 30 days of read access after cancellation are planned. These workflows are being developed and need review before production use.