UK GDPR-compliant AI CV screening
How CVSense meets UK GDPR for CV screening
UK data residency
Candidate data is hosted in the UK and does not leave without your explicit configuration.
No training on candidate data
CVSense does not train its AI models on your customers' CVs.
DSAR support
Search by candidate identifier and export every record CVSense holds about a candidate — including EBSV scores and reasoning.
Right to explanation
Every EBSV score comes with written reasoning, so candidates can be told why they were scored as they were (Article 22 friendly).
Configurable retention
Set the retention period in your CVSense settings — automatic deletion thereafter.
DPA and SCCs ready
Data Processing Agreement (DPA) available on request. Standard Contractual Clauses where any third-country transfer applies.
GDPR & AI CV screening — FAQs
Is AI CV screening GDPR-compliant in the UK?+
Yes — when the platform uses lawful basis (typically legitimate interest with appropriate balancing test, or consent), provides human oversight, supports Data Subject Access Requests, and minimises data retention. CVSense is designed to meet all of these.
Where is CVSense data hosted?+
CVSense is UK-hosted with UK data residency. Candidate CVs and personal data do not leave the UK without your explicit configuration.
Do you train AI models on candidate data?+
No. CVSense does not train its models on customer CV data. Your candidates' CVs are processed for screening and not used as training inputs.
How does CVSense handle Data Subject Access Requests (DSARs)?+
Recruiters can search by candidate identifier and export all data CVSense holds about that candidate, including EBSV scoring records and rationale, to fulfil a DSAR.
How long is candidate data retained?+
Recruiters set the retention period in their CVSense settings. Default is the minimum needed to support the recruitment process, with automatic deletion thereafter.
What is the lawful basis for AI CV screening?+
For most UK recruiters the lawful basis is legitimate interest (Article 6(1)(f) UK GDPR), with a documented Legitimate Interest Assessment. For some scenarios consent (Article 6(1)(a)) is more appropriate. Always seek your own DPO's advice.
Related compliance & solutions
EU AI Act compliance
How CVSense addresses EU AI Act obligations for AI in recruitment.
Bias mitigation
How CVSense mitigates bias in AI CV screening.
Evidence-Based Skill Validation
Deep-dive into CVSense® EBSV — the proprietary engine that scores evidence, not keywords.
For NHS Recruiters
AI CV screening scored against NHS Constitution values and Agenda for Change.
For Civil Service
Score candidates against Success Profiles — Behaviours, Strengths, Experience, Ability.
AI Ethical Policy
Read our published commitment to ethical AI in recruitment.