Yes. Hyring Meet is built to process candidate data in line with GDPR and other global privacy regulations, and it runs on a platform that is ISO 27001 certified and SOC 2 compliant. In practice, that means data handling follows documented security controls that are independently audited, not just a compliance claim on a marketing page.
Concretely, here's how candidate data is protected:
Encryption in transit. Every connection to Hyring Meet — live interview streams, transcript and score data moving between your browser and our servers, API calls to your ATS is encrypted using TLS. Nothing about a candidate's interview travels over an unencrypted connection.
Encryption at rest. Recordings, transcripts, scorecards, and any personal data stored on our servers are encrypted at rest (AES-256) in the underlying database and file storage. This applies whether the data is an active interview record or an older one retained for reporting.
Access control. Candidate data is access-controlled by role: only the recruiter, hiring manager, or team members you've explicitly added to a role or interview can view a candidate's recording, transcript, or scores. Access is scoped per organization and per role, and administrative actions (like exporting data or changing permissions) are restricted to authorized account admins.
Data minimization and retention. Hyring Meet only captures what's needed to produce the interview record — transcript, notes, scores, sentiment, integrity signals, and the recording itself. Retention follows your organization's configured settings, and interviews can be deleted on request in line with data subject rights under GDPR (access, rectification, erasure, and portability).
Consent and regional requirements. Because recording-consent rules and data-retention requirements vary by country and state, Hyring Meet supports consent capture at the start of an interview, but we recommend confirming the specific requirements for your region with your legal or compliance team before launch — this is a shared responsibility between the platform and how your team deploys it.
Sub-processors and hosting. Data is hosted with infrastructure providers that themselves maintain SOC 2 and ISO 27001 certifications, and any sub-processors used for storage or AI processing are bound by data processing agreements consistent with GDPR requirements.
If your organization needs a signed Data Processing Agreement (DPA) or details on our sub-processor list for a security review, reach out to your account manager or support@hyring.com and we'll provide it directly.
