COMPLIANCE AND TRUST
Built to support GDPR-aware recruitment workflows.
Recruitment data is sensitive and AI calling is regulated. We do not claim certifications we do not hold. What we do is give you precise roles, hard product gates and an audit trail.
You are the data controller
The recruitment company decides which candidates are processed, why, from which source and through which channel. Those decisions are yours.
HirePortal acts as processor
Where HirePortal processes candidate data strictly on your documented instructions it acts as processor. It remains an independent controller for its own account administration, billing, security, fraud prevention, diagnostics and legal compliance.
You decide who may be contacted
You are responsible for the lawful basis and the campaign instructions. Public availability of data is not in itself a lawful basis.
Explicit confirmation before import or contact
Before importing candidates or enabling an ATS integration, an authorised user must actively confirm lawful authority. Missing or unmappable consent defaults to “unknown — no call”.
Every AI call discloses that it is AI
The assistant states at the start of the first interaction that the candidate is speaking with an AI system, calling on behalf of your recruitment organisation.
Immediate opt-out and suppression
A refusal, objection or withdrawal is registered immediately, blocks further outbound communication and survives later CSV re-import or ATS re-sync.
Preferences and actions are logged
Actor, organisation, timestamp, declaration version, source and consent evidence metadata are stored so you can demonstrate what happened.
Data minimisation and configurable retention
Only professionally relevant data for a concrete recruitment purpose, with retention that follows your instructions. Special-category data is excluded by default.
Human-in-the-loop by default
HirePortal supports recruiters. It does not make autonomous hiring or rejection decisions, and should not be used for solely automated decisions with legal or similarly significant effect.
DPA and security information on request
Our data processing agreement is published below and security details are available on request.
Telephone contact: we apply the stricter rule
Dutch telemarketing rules as amended on 1 July 2026 target unsolicited commercial calling. A genuine call about employment is not automatically telephone sales, but the boundary is fact-sensitive. HirePortal therefore contractually requires documented lawful authority for every outbound AI call, and treats explicit prior telephone permission as required wherever the Telecommunicatiewet or another applicable rule requires it. No demonstrable authority means no call.
EU AI Act transparency
Article 50 transparency duties apply from 2 August 2026. HirePortal's AI disclosure at the start of each call cannot be switched off where doing so would cause non-compliance, and matching or scoring support is designed to keep meaningful human control with your recruiters.
Legal documents
The current drafts of our contractual and privacy documentation.
Your next placement is probably already in your ATS.
3 days on your own data · no credit card · Zoho Recruit or CSV
No credit card required
One call. No sales script. You stay in control of who is contacted, and nothing is called without your confirmation.