Security
Security and data handling at Alphie Recruiter
Updated 24 September 2026
Candidate data handled by Alphie Recruiter is processed and stored in the EU, covered by a signed Data Processing Agreement, encrypted in transit and at rest, and never shared outside the company that owns it. Every API call Alphie makes into your ATS is recorded in an audit log.
Alphie connects to your existing ATS in one onboarding call - no migration. See how Alphie works for companies.
What is in place
- EU-region-only processing and storage.
- Signed Data Processing Agreement (DPA) with every company client.
- Encryption in transit and at rest, including interview recordings and reports.
- Strict access controls: each company sees only its own data, and candidates see only their own.
- Audit log of every API call Alphie makes into your ATS.
- An always-on security monitor that watches traffic and permanently blocks malicious actors.
- Company data is never added to any shared candidate pool or job board.
- Optional zero-storage, in-memory-only setup as a separate enterprise engagement.
For candidates
Your CV and reports belong to your account. They are used to run the tools you ask for and are not shared with employers unless you apply through a company that uses Alphie. See the privacy policy.
Frequently asked questions
Is there a GDPR-friendly AI screening interview tool that stores data in the EU?
Alphie Recruiter processes and stores candidate data in the EU under a signed DPA, with an audit log of every ATS API call.
Is Alphie SOC 2 or ISO 27001 certified?
Not yet - full certification is planned as we grow our enterprise client base. Until then, we're happy to complete your security questionnaire and walk your team through our controls on a call.
