Security

Where the data lives

• The platform, its database and this website run on our own server at DigitalOcean in Frankfurt, Germany.
• Every connection is encrypted (HTTPS).
• Each organisation's data is kept separate from every other organisation's.
• Access to the server is limited to the people at Scoutly who need it.

During the interview

Integrity controls are optional and set per job. When they're on, this is what happens:

• Before: an identity photo is taken, and the camera, microphone, entire-screen sharing and browser full screen are checked.
• During: leaving full screen or the interview page is logged, and text pasted from outside the interview is blocked.
• After: the shared screen is reviewed for AI tools, the answers for a second voice, and the camera for covering or a virtual camera.
• Every event lands on a timeline with the question being answered and the screenshots around it.
• Candidates can be invited with a unique link, so each interview belongs to one person.

People decide

• An integrity event is not a verdict. It's recorded for a person on your team to review in context.
• Scoutly doesn't use the identity photo for facial recognition, and doesn't analyse faces or try to detect emotions.
• Candidates are told from the first screen that the interviewer is an AI.
• Scoutly doesn't decide who is hired or rejected. Your team does, with the full transcript behind every score.

Service providers

We use these providers, each bound by data processing terms. We don't sell personal data or use it for advertising.

Connected apps, such as Claude and ChatGPT

• A connected app acts with the permissions of the user who connected it, in one workspace.
• It can send interview invitations only after the user confirms the list of recipients.
• Access tokens are stored only as hashes and expire after an hour. A connection unused for 30 days stops working, and a user can revoke it at any time.
• Each tool call is logged by name, result and time. The log never contains candidate content.

This website

• No cookies, analytics or advertising trackers, and no third-party scripts. Fonts, images and videos come from our own server.
• Server logs are kept for 14 days, to keep the site secure and limit repeated form submissions.