No public evidenceEightfold AI and GDPR
CertReports found no public GDPR evidence for Eightfold AI as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 18 Mar 2020
- Expires or valid through
- 6 May 2027
- Scope
- Eightfold AI Inc. (“Eightfold”) is a cloud provider of software as a service (SaaS) AI-powered products used in human resources which facilitate talent acquisition and talent management. Eightfold processes covered personal data, as a processor under applicable data privacy laws (including GDPR, UK GDPR, and the revised Swiss Federal Act on Data Protection), for the purpose of providing our products and services to Eightfold customers, who are the controllers of this personal data under applicable privacy laws. Eightfold relies on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF (the “Frameworks”) for data transfers from the EU, the UK, and Switzerland, respectively, to the U.S. with respect to this processing. The type of personal data processed by Eightfold in the above-described context is personal data of job candidates and employees of Eightfold customers. This data includes personal data typically found in a resume, CV, or candidate application, including names, contact information (e.g., physical address, email address, and phone number), professional and work experience, and educational background. For AI Interviewer, video recording and transcript text files of the interviews carried out between the AI Interviewer and the respective job candidate will be processed as well. Eightfold processes personal data of authorized end users of our services. These end users include job candidates and employees, as well as HR recruiters, hiring managers, and administrative users of our products at Eightfold customers. More information about the personal data we process about data subjects is set forth in the Eightfold Privacy Policy and the data processing agreements which Eightfold enters into with its customers. Eightfold processes the above-described personal data under the terms of our services agreements and data processing agreements with our customers and under applicable law. These agreements permit Eightfold to disclose this personal data to approved Eightfold processors; these companies are listed in Eightfold’s online Subprocessor Notice. Eightfold engages these companies in compliance with applicable privacy laws and the terms of our agreements with our customers.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Eightfold AI: Active: SW-US Certification, EU-US Certification, UK Extension Certification | Live pagesha256 df9373a300 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Eightfold AI GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags or the HR and HRIS category) whose GDPR row is verified or vendor-stated, ranked by similarity.
No HR and HRIS vendor has GDPR evidence in the index yet.