Security and data

Security and data protection: what Seeqle guarantees, and how to check it.

Seeqle hosts its clients' data in the European Union, acts as a processor under Article 28 of the GDPR and aligns its AI Agents with the EU AI Act. Campaign data is only used to optimize that campaign. A Match Agent score can be read criterion by criterion, and the hiring decision stays human. This page lists each guarantee, what it commits us to and how to verify it. Nothing here that is not already written in our privacy policy.

EU hosting, AWS Ireland
GDPR, processor under Article 28
EU AI Act, decision support
Human hiring decision

Eight guarantees, read like a spec sheet

For each one: what Seeqle commits to, then where and how to verify it. References point to the privacy policy, the reference document.

01

Hosting in the European Union

What we commit to

Personal data processed by Seeqle is hosted in the European Union, with AWS in Ireland. The advertising networks that run your campaigns act as sub-processors, only to deliver the service, under the European Commission's Standard Contractual Clauses.

How to verify it

The location of every sub-processor is listed in the privacy policy, section 6. For any transfer outside the EU: SCCs (Decision 2021/914), a case-by-case transfer impact assessment, and the EU-US Data Privacy Framework for certified sub-processors.

02

GDPR: clear roles, enforceable rights

What we commit to

Your organization is the data controller; Seeqle is a processor under Article 28 of the GDPR. Data is never sold. A candidate can exercise their rights (access, rectification, erasure, restriction, portability, objection) with the recruiter or directly with Seeqle, which forwards the request to the client concerned without delay and assists them. Response within 30 days.

How to verify it

Data categories, purposes and legal bases: privacy policy, sections 2, 3 and 11, with the GDPR article next to each right. DPO contact: privacy@seeqle.com. Complaints can be filed with the CNIL.

03

Limited retention, dated deletion

What we commit to

Applications and AI enrichments: 24 months at most, a period set by the client. Browsing data: 13 months. On expiry or at the end of the contract, deletion or anonymization within 30 days, unless a legal obligation applies.

How to verify it

Retention table, privacy policy, section 8. The only campaign data kept beyond that (3 years) is anonymized statistics.

04

Your campaign data only optimizes your campaigns

What we commit to

Campaign data is used to optimize that campaign and the account that launched it. It does not train a model for another advertiser, nor for a third party.

How to verify it

Accounts are segregated through role-based access control and access logging (section 9 of the privacy policy). Performance tracking relies only on anonymized statistics (sections 3 and 8).

05

Decision support, never automated decisions

What we commit to

The Match Agent analyzes, enriches, scores and ranks applications. It is decision support, not an automated decision within the meaning of Article 22 of the GDPR: no hiring decision is made solely by automated means, the recruiter keeps the final say.

How to verify it

Privacy policy, section 4. In the interface, each criterion of the job is shown as validated or not validated next to the profile: the score reads line by line.

06

EU AI Act: transparency and documentation

What we commit to

AI systems used in recruitment may fall under the high-risk category of Regulation (EU) 2024/1689. Seeqle commits to meeting the transparency, technical documentation and data governance obligations that come with it.

How to verify it

Each AI processing (enrichment, scoring, behavioural profile) is listed with its purpose and legal basis in the privacy policy, sections 3 and 4.

07

Targeting without discriminatory criteria

What we commit to

The Attract Agent selects audiences from the analysis of the job: occupation, skills, area and timing, among 5,100 professional audiences. No discriminatory criterion enters the targeting.

How to verify it

The actual split of channels and budget can be checked in each campaign's dashboard, at any time.

08

Technical security

What we commit to

Data encrypted in transit (TLS 1.2 and above) and at rest (AES-256), role-based access control, access logging and monitoring, regular backups and a continuity plan, regular security testing and audits, staff awareness training.

How to verify it

Privacy policy, section 9. For a security questionnaire or a tender: privacy@seeqle.com.

A short page, on purpose.

Every line above restates a commitment already published in our privacy policy, which remains the reference document. If a DPO or a security questionnaire needs more, write to privacy@seeqle.com.