Vettasy
Start a pilot

What happens to interview data.

Where it is stored, who can open it, what the app never sees, and how the AI is governed.

Principles

Each rule comes with the mechanism that enforces it.

RuleMechanism
The app runs only during the interview.No background process, no autostart and no scheduled tasks. Task Manager or Activity Monitor shows this.
Nothing is recorded without consent.Two separate consents on screen, for the recording and for Verified Session. The recording indicator stays visible and cannot be turned off.
Both sides get the same report.One session report, sent to the candidate and to the employer.
The candidate keeps a copy.A download button in the app, and a link by email within an hour of the interview.
A person makes each decision.AI output is labelled as a draft until a person confirms it. The decision log records who decided and on what evidence.
Limits are stated.Vettasy raises the cost of cheating and makes evaluation provable. It does not promise full protection.

What the app sees

Only between the start and the end of the interview, after consent.

During the interview
Camera and microphone
Screen sharing, when started for a task
Windows hidden from screen capture
Known AI copilot processes
Virtual cameras and audio drivers
A second monitor, as a fact
Liveness, once at the start
Never
Files
Keystrokes outside the app
Browser history
The screen outside the app
What is on a second monitor
Emotions, facial expressions and tone of voice
Anything before joining or after leaving
How Verified Session works

Storage and deletion

Interview data is stored in the EU. The employer can shorten the retention period and cannot extend it.

Germany

Hetzner data centers in Nuremberg and Falkenstein. A US region is available on Enterprise.

7 to 90 days

Recording retention, set for each role. 90 days by default.

30 days

Deletion on request, backups included, unless a dispute is open.

AES-256

Encryption at rest, and TLS 1.3 in transit.

Who can open what

CandidateEmployerVettasy
Recording and transcriptOnly in a dispute, logged
Session reportOnly in a dispute
ScorecardFeedback onlyNo
Raw signal dataNoNoA reviewer, in a dispute

When a subscription ends, the employer’s data is deleted 30 days after notice. Candidate copies stay available until the original retention period ends.

GDPR rights

RolesThe employer is the controller. Vettasy processes interview data on its behalf under the DPA.
AccessThe candidate’s copy in the app and by email.
DeletionWithin 30 days of a request, backups included, unless a dispute is open.
ObjectionAny line of the session report can be disputed within 14 days.

Subprocessors

The complete list. Transcription runs on the participants’ computers and involves no subprocessor.

ProviderPurposeRegion
HetznerHosting and storage of recordings, transcripts and reportsEU
LiveKitReal-time audio and video during the call, routed through EU serversEU
Amazon BedrockScorecard drafts, briefs and follow-up prompts with Anthropic’s Claude models, run in Frankfurt. Prompts and outputs are not stored.EU
OpenAISynthesized voice for the optional voice translation, with zero data retentionEU
DeepLCaption translation, with zero data retentionEU
CloudflareNetwork edge, DDoS protection and app downloadsGlobal
AWSThe US data region, for Enterprise customers who choose itUS
StripeBilling for employersUS
WorkOSSSO and SCIM on EnterpriseUS
SentryError reports from the app, without interview contentEU
PostmarkTransactional email, such as invitations and recording linksUS
PlausibleWebsite analytics without cookiesEU

Providers outside the EU are covered by Standard Contractual Clauses. Customers are notified 30 days before a subprocessor is added. Last updated 24 September 2026.

Security

Measures that can be checked, and the audit schedule.

Signed buildsThe Windows and macOS installers are code-signed.
No elevated accessNo background process, no autostart and no administrator rights.
Vulnerability disclosure[email protected] and /.well-known/security.txt

Audit schedule

Q4 2026Independent penetration test, with a published summaryScheduled
Q3 2027SOC 2 Type II reportIn progress
2028ISO 27001 certificationPlanned

AI and the EU AI Act

AI drafts scorecards, briefs, prompts and feedback. Each output counts only after a person confirms it.

Article 5Emotion recognition at work has been banned since February 2025. Vettasy does not analyse emotions, facial expressions or tone of voice.
Article 50Transparency obligations apply from 2 August 2026. AI use is disclosed in the invitation, on the consent screen and in the app. AI output is labelled, and the synthesized voice in the optional translation is marked as AI-generated.
Annex IIIHiring is a high-risk use. Under Regulation (EU) 2026/1744, these obligations apply from 2 December 2027. The decision log, records of human oversight and exportable documentation are already part of the product.
Model trainingCustomer data is never used to train models. The AI does not reject or rank candidates.

Security overview and a signed DPA on request.

For security questionnaires and legal review. Vulnerability reports go to [email protected].