Security and compliance

Built for the evidence trail, not retrofitted to it.

Hiring is a high-risk use of AI under the EU AI Act. We built StepUP with those requirements in mind: every conclusion is traceable, a person makes the decision, and candidate data is used for your role and nothing else.

Assessment

Every conclusion can be checked.

Evidence trail by construction

Reports are quote-linked: every conclusion points to what the candidate actually said. The record exists because of how the reports are written, not as a separate compliance layer.

A human always decides

StepUP produces an assessment to support a hiring decision. It does not make one, and nothing is auto-rejected on your behalf.

AI assists, it does not interview

Interviews are run by senior engineers. AI helps turn the transcript into a structured report. It does not ask the questions and it does not make the call.

Interviewers have no stake

They do not know your hiring pressure, they do not tell the candidate the outcome, and you book an anonymous slot rather than a name.

Candidate data

GDPR, and boring about it.

Recorded with consent

Interviews run on Zoom with the candidate's consent. You get a copy of the recording with the report.

One purpose

Candidate data is processed for your role only. It is never resold or reused as a talent pool.

Deleted on request

Retained while the report cites it, and deleted on request.

Questions about data processing: operations@stepup.services