Trust
Security & GDPR
Your candidate data is hosted in the EU. Built-in tooling for a GDPR-aligned hiring process, included on every plan, including Free.
Security
How JellyMatch handles your data
Hosting
Where your data lives
Hosted in the EU
Your candidate data is hosted in the EU.
HTTPS everywhere
All traffic is protected with TLS in transit.
Backups
Backups built to survive a bad day
Encrypted, off-server
Backups are encrypted and stored off the app server.
Append-only backups
The internet-facing app server can write backups but cannot delete them. Deletion is only possible from a separate control host that is not exposed to the internet, so a compromised server cannot wipe your backups.
Frequent schedule
The database is backed up every 6 hours. Uploaded CVs, attachments and config are backed up daily. A full-cluster snapshot runs weekly.
Retention
We keep 7 daily, 4 weekly and 6 monthly backups.
Verified, not assumed
Every backup is checked before it is archived: the dump must be restorable and must contain data. The archive gets a full integrity check monthly, and restores are rehearsed into a scratch database.
Monitored
Every backup job reports to dead-man’s-switch monitoring. A missed or failed backup alerts us.
Application
Access control inside the app
No public CV links
CVs and documents are never exposed through public URLs. Every download is authenticated and streamed.
Tenant isolation and roles
Strict per-organization isolation, with role-based permissions.
Rate limiting
Rate limiting on every endpoint.
SSO and audit log
SSO/SAML/SCIM and an audit log are available on Scale.
Transparency
Nothing to take on faith
Open source core
The scoring and shortlist logic can be audited by anyone.
GDPR
Tooling for a GDPR-aligned hiring process
Built-in tooling for a GDPR-aligned hiring process, included on every plan, including Free.
Hosting
Data location
Hosted in the EU
Your candidate data is hosted in the EU.
Retention
Keep candidate data only as long as you should
Automatic retention policy
Set a policy per organization. Candidate data is deleted automatically a set number of months after the candidate’s latest recruitment process ends (24 by default), not after upload date.
30-day safety net
Erasure goes through a 30-day recoverable quarantine first. A recruiter’s delete is a safe soft delete that can be restored.
One-step erasure
Removes the whole data graph: records, applications, documents and stored files, AI results, interviews, transcripts, comments and the activity log.
Backups age out
Backups age out on their normal rotation (about 6 months at most), and erasures are re-applied after any restore, so deleted candidates never come back.
Candidate rights
Handle requests and obligations
Data subject requests
Export any candidate’s data as JSON for access (Art. 15) and portability (Art. 20) requests.
Legal holds
A hold with a required reason and an expiry blocks both automated and manual erasure.
Privacy notice on every form
Show a configurable privacy notice (policy URL and contact) on every public application form.
Privacy-safe audit trail
Retention actions are logged without names, emails or CV content.
Transparent AI
A human stays in charge
Every score shows its reasoning
JellyMatch keeps a human in the loop: every AI score shows its reasoning, so a person makes the decision. This is relevant to GDPR Art. 22 on automated decision-making.
Contracts
Data processing agreement
DPA available
A DPA is available on Scale and Enterprise.
Disclosure
Responsible disclosure
Found a vulnerability? Report it privately by email.
- We acknowledge reports within 3 business days.
- Safe harbor for good-faith research.