Where your interview data lives, and for how long
Interview recordings are stored in Germany, encrypted with AES-256, kept 7 to 90 days and deleted within 30 days on request. The full picture of the data.
Recordings and reports are stored in Germany, encrypted with AES-256 at rest and TLS 1.3 in transit, kept for 7 to 90 days as the employer sets, and deleted within 30 days of a request. The candidate, the interviewers and the hiring team can see the recording; Vettasy staff only during a dispute, with access logged; and customer data is never used to train models.
Interview data is sensitive, and where it lives matters as much as what it contains. This is the full picture of what Vettasy stores, where, for how long, who can open it, and how it is deleted.
Where it is stored
Recordings and reports are stored in Germany, in Hetzner data centers in Nuremberg and Falkenstein. The default region is the EU. A US region is available on Enterprise for customers who need it.
How it is protected
Data is encrypted at rest with AES-256 and in transit with TLS 1.3. Access by Vettasy staff requires single sign-on with a second factor, is limited, and is logged. Customer environments are separated at the application and storage layers, and every change ships through code review and dependency scanning.
How long it is kept
The employer sets retention for each role, from 7 to 90 days, with 90 days as the default. Session reports are kept for the same period as the recording. Consent records are kept with the recording, so the record of what was agreed lasts as long as the material it covers.
Who can open it
Both sides receive the same session report. Access to the recording is narrow:
- The candidate, who gets their own copy.
- The interviewers and the hiring team at the employer.
- Vettasy staff only during a dispute, to review the underlying data, with every access logged.
No one else. The point of symmetry is that the candidate holds the same material as the employer and can check it.
How it is deleted
Deletion can be requested in the app or by writing to privacy@vettasy.com. It is carried out within 30 days, backups included, unless there is a legal hold such as an open dispute. Encrypted backups rotate within 30 days, so a deleted recording does not linger in an old backup indefinitely.
What is never done with it
Customer data is never used to train models. The AI that drafts scorecards runs on Anthropic's Claude through Amazon Bedrock in Frankfurt, and the interview material is processed to produce the draft, not to improve a model. The app records only what happens inside it, audio, video, the code pad, the whiteboard and the session chat, and nothing outside the app.
Where to check this
These facts are published, not just described here. The Trust center lists the storage region, the retention figures and the access rules; the Data Processing Addendum and the Privacy Policy put them in contract terms, with the subprocessor list; and the same figures appear on the consent screen before an interview begins.
Sources
- Vettasy, Trust center, Data Processing Addendum and Privacy Policy.
Written by the Vettasy teamVettasy is a desktop application for job interviews. Employers run structured, recorded interviews in it with verified participants. It is free for candidates. Windows and macOS.
