Trust, Compliance & Responsible AI
Every assessment is auditable. Every score is explainable. Every hiring decision is defensible — to candidates, to regulators, and to your board.
How Charvak builds trust
Audit Trail
Every assessment is logged, timestamped, and reproducible. Full event history for any candidate, any assessment, any time.
- Immutable event log per assessment
- Timestamp + signature on every submission
- Evidence trail for every score
Explainable Scoring
No black boxes. Every score is traceable to specific answers, test cases, or behavioral signals.
- Per-question breakdown
- Per-skill topic scoring
- Written rationale for AI judgments
Human Oversight
AI recommendations are advisory. Final hiring decisions always belong to you.
- No automated rejections
- Human review at every stage
- Override any score
Compliance standards
EU AI Act
Aligned to transparency, human oversight, and risk classification requirements for AI hiring systems.
- Transparency: every score traceable to evidence
- Human oversight: decisions remain yours
- Bias monitoring: statistical fairness checks
- Data governance: retention policies enforced
NYC Local Law 144
Aligned to NYC automated employment decision tool requirements for bias audits and candidate notice.
- Bias audit available on request
- Adverse impact ratio published per year
- Candidate notice provided at assessment start
- Data retention within NYC-mandated limits
India DPDP Act
Aligned to India Digital Personal Data Protection Act for consent, purpose limitation, and data principal rights.
- Explicit consent captured before assessment
- Purpose limitation: data used only for hiring
- Right to access, correct, and erase
- Data stored in India-region database
GDPR
Aligned to EU General Data Protection Regulation for data subject rights, transfers, and transparency.
- Right to access, erasure, portability
- Data processing agreements available
- EU-region data residency on request
- 72-hour breach notification
Infrastructure & security
SOC 2 (roadmap)
Target: Q3 2027. In progress. Request the readiness report for your procurement cycle.
- Encryption at rest and in transit
- Access controls: role-based, 2FA on admin
- Logging: full audit trail of admin actions
- Backup: daily, retained 30 days
Data residency
Available on request. India-region by default; EU and US regions available for enterprise contracts.
- India: default (nearest region)
- EU region: available on enterprise contract
- US region: available on enterprise contract
- Data processing agreements available
Candidate rights
Candidates have full control over their assessment data. Rights are enforced, not just promised.
- Access: download all assessment data
- Erasure: delete account and all data
- Portability: export in machine-readable format
- Correction: fix any inaccurate data
Need a compliance review for your procurement?
Request the full trust package: SOC 2 roadmap, DPA template, bias audit summary, and data residency options.
Request the trust package