HireFlow360 connects people workflows with permissions, decision context and data governance. The controls required for your organization depend on your use, configuration and location.
These workflows describe the intended platform scope. Confirm the available controls, configuration and supporting evidence for your deployment before relying on them. A listed framework or security practice is not a claim of completed certification.
Keep the role requirements, screening criteria, evidence, interview scorecards and final decision connected. A reviewer should be able to see what influenced the outcome and who approved it.
The reporting design covers EEO-1 data collection and export, candidate disposition tracking and the records an organization needs for its own reporting process.
Use consistent role criteria, structured scorecards and anonymized screening to support fair review. Monitoring should help reviewers investigate differences in selection outcomes, with the context needed to interpret them.
HireFlow360 coordinates relevant verification through VeraClare. Define the purpose, subject authorization, check scope and required freshness before ordering; review the result in the context of the role.
Support access, correction, export and deletion requests with an identity check, a clear owner and a record of the response. Personal information and employer-controlled records can have different request and retention paths.
The intended lifecycle expires employment-linked sharing grants automatically when employment ends. Changes of role should also trigger an access review so previous responsibilities do not leave unnecessary access behind.
Review where the selected services process and store information, who operates them and which contractual terms apply. Available regional options need to match the actual deployment and the DPA.
Connect user activity, API access, permissions and assisted decisions in an exportable history. Configure the relevant records and review process for your organization’s reporting and AI-governance needs.
Review authentication, encryption, network protection, backups and incident handling alongside the people workflow. Assurance is established by the current evidence and the scope of the service agreement.
Agree the purpose, role criteria, reporting needs, access owners and retention schedule.
Capture authorization, evidence, scorecards, approvals and changes as the working relationship develops.
Investigate exceptions, export the required history and verify access at role changes and offboarding.
GDPR and CCPA request handling, employment reporting and AI governance depend on the organization, location and use. HireFlow360 supports the workflow; the responsible organization reviews its obligations and decisions. Certifications, testing cadence and service levels require current evidence and agreed scope.