TalentLyft GDPR Roadmap

What exactly are we doing?

GDPR is likely to affect you and your business, so our advice is to prepare for it as soon as possible. The way you store and process data, communicate with candidates and get their consent will change, and that's a good thing. Sure, it may be a little extra work, but in the end your hiring process will be more robust and secure. We're determined to offer you tools to stay compliant with minimum effort.

New features and tooling

We've devised our GDPR compliance package as an opt-in feature. Once you turn it on you'll be able to set the data retention period and define your privacy policy to get started. That's about it, as everything else is handled automatically by TalentLyft.
When applying to your job openings, candidates will be presented with your privacy policy and consent prompt.

Data access, erasure and portability

To fulfill data subject's right to access, modify and delete data being processed, every candidate applying to an opening will receive an confirmation email with quick links allowing them to request their data to be updated or deleted. Candidates will also have the ability to export the data or request restriction of further data processing.

Auditing

TalentLyft already tracks your team's actions and allows you to review those actions as a part of the application itself. We will additionally categorize personal data and update access tracking mechanisms to enable more detailed reports.

Data Processing Agreements

As a part of our compliance process, we're signing Data Processing Agreements(DPA) with Microsoft as our cloud infrastructure provider, and Intercom as our support platform.
We will also be offering our customer to sign DPA with TalentLyft, per request.