Trust & Data
Trust & Data at Atlast
Hiring is built on trust. So is Atlast.
We design our platform to be transparent, privacy-first, and built with data protection in mind, in line with applicable EU and UK data protection requirements. Below is a high-level overview of how we handle personal data, where it is processed, and who helps us deliver the service.
This page is intended to provide clear and accessible information. More detailed obligations are set out in our Privacy Policy, Data Processing Agreement (DPA), and customer contracts.
Data Protection & Privacy
Atlast Global Technologies acts as a data processor on behalf of its customers, who act as data controllers, for the purposes of applicable data protection laws.
We process personal data solely on documented instructions from our customers and in accordance with:
- The EU General Data Protection Regulation (GDPR)
- The UK GDPR and Data Protection Act 2018
Our data processing obligations, including security measures and data subject rights assistance, are set out in our customer agreements and Data Processing Addendum (DPA).
Where Your Data Lives
Customer data is primarily hosted within the European Union.
In cases where data is processed outside the EU or the UK, we rely on approved transfer safeguards such as:
- EU Standard Contractual Clauses (SCCs)
- UK-approved international data transfer mechanisms
These safeguards are designed to ensure that personal data remains appropriately protected, regardless of where it is processed.
Our Subprocessors
To operate Atlast, we work with a small number of carefully selected third-party service providers (“subprocessors”). Each subprocessor is contractually required to meet data protection and security standards consistent with GDPR and UK GDPR requirements.
| Provider | What They Help Us With |
|---|---|
| AWS | Infrastructure, databases, backend services, and application hosting |
| Ably | Real-time messaging in the Atlast portal |
| Sentry | Performance monitoring and error tracking |
| Uploadcare | Secure storage and delivery of PDFs and images |
| reCAPTCHA | |
| OpenAI | AI and large language model functionality |
Atlast remains responsible for the processing of personal data carried out by its subprocessors on its behalf.
Customers are informed of changes to our subprocessors in accordance with the terms of the DPA.
How We Use AI
Atlast uses AI to support hiring teams, not replace them.
AI functionality is designed to assist with tasks such as:
- Talent mapping and shortlisting support
- Interview simulations and roleplay
- Scheduling and workflow automation
- Insights and analyticS
CV scoring
Where enabled by an employer, the platform scores candidate profiles against a role. The scoring criteria — for example, the weighting given to relevant experience or qualifications — are configured by the employer, not determined by the AI. The AI applies those criteria and produces a score. A human reviews all scored results before any decision is made. This means scoring is transparent and employer-defined, not a black-box algorithmic ranking.
AI outputs are designed to support human decision-making. Final hiring decisions always remain with the customer.
AI features are designed with data minimization and privacy principles in mind. Atlast does not permit AI providers to use customer data to train general-purpose models, except where data is anonymized or explicitly agreed with the customer.
EU AI Act
AI systems used in recruitment are classified as high-risk under Regulation (EU) 2024/1689 (the EU AI Act). As a provider of AI used in hiring, Atlast operates as a high-risk AI provider under this regulation. We maintain technical documentation for our AI systems and are registering in the EU public AI database in accordance with applicable deadlines. Our AI systems do not use emotion recognition, biometric categorisation for protected characteristics, or any input prohibited under the Act.
Data Subject Rights
Atlast supports its customers in responding to data subject rights requests, including requests for access, rectification, erasure, restriction, objection, and portability, in accordance with applicable data protection laws and the DPA.
Transparency Matters
We believe customers should be able to understand how their data is handled, without needing to read a legal textbook.
If you have questions about data protection, privacy, or security at Atlast, contact us at: privacyandsecurity [at] this domain