GDPR FAQs

When a candidate begins an assessment session initiated by a Testlify client, we store the following information of the candidate on behalf of our client: email address; name; optionally, at the client's discretion, phone number, the last school attended, academic degree, major, programming experience, resume, and a link to social profiles (GitHub, LinkedIn, etc.); and metadata collected for proctoring (IP address, webcam snapshots, browser usage data, and session recording data, some of these are optional and collected at the client's discretion). If the recruiter uses a Testlify account for inviting candidates to assessments, we store the recruiter's name, email address, and phone number (optional).

Any Testlify client that administers the assessment owns the data of all candidates that took the assessment. The responsibility of updating and deleting all candidate data when requested by a candidate lies with the client. Testlify provides our clients with necessary support (customer support and product features) to carry out any such requests however the company wants to.

To comply with GDPR, companies using Testlify will need to state how long they will be keeping candidate data in their systems. By default, we retain candidate data until they deactivate their account, after which we promptly delete it. According to GDPR, data should only be kept for a 'reasonable amount of time.' Our best-practice advice is to review your recruitment processes to determine an appropriate retention period, many companies opt for a 12- or 24-month time frame after reviewing their recruiting practices. With Testlify, automating this data retention process is easy: you can contact us at support@testlify.com to set your data retention time frame in months, and we will automatically delete candidate data that exceeds the retention period while preserving anonymous information for reporting. (While we've consulted legal professionals on GDPR compliance, Testlify is not a legal firm; the information provided is only general advice, companies should seek independent legal counsel for their specific data protection and security requirements.)

Clients that administer the assessment; the candidate, through requests to the client; and the Testlify internal team, only when a support request is raised by the client and data access is necessary to support such request.

Yes, we are GDPR compliant and we host our data on AWS Ireland region in Europe.

All users of a client account with roles, Candidates Admin, Tests Admin, Super Admin, have access to candidate reports.

For enterprise users with specific contracts, they can delete the candidate entry using the 'delete' action in the candidates' view. Furthermore, you can email us at support@testlify.com with the list of candidates' data to be deleted. You can also contact your Testlify Customer Success Manager for such requests.

Testlify maintains logs of all actions that are state-changing as well as unpermissioned actions, for troubleshooting and security. Super Admins of a client account can view the audit logs from their dashboard. Any further processing requests of audit logs should be routed through support@testlify.com or your Testlify Customer Success Manager.

No.

For editing a candidate's data, please contact us at support@testlify.com with details about the request.

To comply with GDPR, companies using Testlify will need to state how long they will be keeping candidate data in their systems. By default, we retain candidate data until they deactivate their account, after which we promptly delete it. According to GDPR, data should only be kept for a 'reasonable amount of time.' Our best-practice advice is to review your recruitment processes to determine an appropriate retention period, many companies opt for a 12- or 24-month time frame after reviewing their recruiting practices. With Testlify, automating this data retention process is easy: you can contact us at support@testlify.com to set your data retention time frame in months, and we will automatically delete candidate data that exceeds the retention period while preserving anonymous information for reporting. (While we've consulted legal professionals on GDPR compliance, Testlify is not a legal firm; the information provided is only general advice, companies should seek independent legal counsel for their specific data protection and security requirements.)