Privacy

What ShortlistKit does with CVs and candidate data, in plain words.

What we handle

Your team uploads CVs. ShortlistKit extracts the text, scores each CV against the criteria you set, and shows the supporting evidence to your reviewers.

Candidate details are removed before AI calls

Before any CV text is sent to an AI provider, personal identifiers are stripped through our anonymization step. It is built with GDPR in mind. Text in non-Latin scripts is redacted by default, because it can carry names. As a result, a CV written mainly in a non-Latin script is scored on its Latin-script content only.

Your AI key

You bring your own AI provider key. It is encrypted at rest and is never displayed again after you enter it.

Humans decide

Nothing is rejected automatically. A person on your team must confirm every rejection.

Deleting data

Your team can hard-delete a candidate. That removes the CV file, extracted text and scores. Only a minimal, anonymized record of the deletion stays in the audit log.

Where data lives, and what we do not do

• Data is stored on a single server we operate.
• We do not train AI models on your data.
• We do not use advertising trackers.

Questions? Email support@shortlistkit.com. This page describes how the product behaves today; it is not a certification or an audit report.