The controls that matter to HR, legal, and IT.
Assessment data is sensitive, and a hiring decision has to hold up if it's ever questioned. Here's how Gradogram keeps your company's data walled off from every other company, gives you a full record of what happened, and never uses a candidate's answers to train AI models — explained in plain terms, not a compliance PDF.
What's in place today
Your data, walled off
Your company's data is walled off from every other company on the platform — not a setting someone has to remember to turn on.
Never used to train AI models
Candidate responses are never used to train or fine-tune any AI model — ours or anyone else's.
Immutable audit trail
Every material action is recorded immutably — who did it, what changed, and when.
Deletion on request
Candidate data can be anonymized on request, satisfying data-deletion obligations without breaking your records.
Recoverable, not gone forever
Deleted records stay recoverable for a grace period before permanent removal, so nothing is lost to a mistaken click.
How your data is protected
Five controls do the heavy lifting. Each is enforced in the product, not a policy you have to take on faith.
Your data, walled off
Your company's data is walled off from every other company on the platform — not a setting someone has to remember to turn on.
That separation is built into the core of the platform and checked on every single action, not added feature by feature where it could be missed. One company can never read or reach another company's data.
Never used to train AI models
Candidate responses are never used to train or fine-tune any AI model — ours or anyone else's.
A candidate's answers are used only to grade that one assessment. They're not fed into model training, shared with a model provider for training purposes, or used to improve any AI system beyond the result it was submitted for.
Immutable audit trail
Every material action is recorded immutably — who did it, what changed, and when.
Each entry captures who took the action, what changed, and enough context — timing, device, session — to investigate it later. Nothing in this record can be edited or deleted after the fact, so a hiring decision has a defensible trail behind it.
Deletion on request
Candidate data can be anonymized on request, satisfying data-deletion obligations without breaking your records.
Anonymization replaces a candidate's identity with tokens: the record persists for analytics and reporting, but the person disappears. It's a targeted control for a specific request, not a blunt delete.
Recoverable, not gone forever
Deleted records stay recoverable for a grace period before permanent removal, so nothing is lost to a mistaken click.
Deletion marks a record as removed rather than destroying it right away, which keeps your audit trail intact and gives you a recovery path. Permanent, irreversible removal is reserved for the deletion-on-request flow above.
Questions buyers ask us
Can another company on the platform see our data?
No. Every company's data is walled off from every other company's — that separation holds everywhere, not just where a developer remembered to check.
If a decision is challenged, can we show what happened?
Yes. Material actions are written to an immutable audit trail with the actor, the change, and the timestamp — so a hiring decision has a record behind it.
What happens when a candidate asks to be forgotten?
Their identity is anonymized: the analytical record stays, the personal data goes. That satisfies a data-deletion request without breaking your reporting.
Do you use our candidates' answers to train your AI models?
No. A candidate's responses are used to grade that one assessment and nothing else — never to train or fine-tune any AI model, ours or a third party's.
What we won't claim
Trust is easy to erode with an overclaim. We describe the controls the product enforces today, and we're explicit about what we don't assert.
- We don't display compliance badges or certifications we haven't earned.
- We don't publish uptime or security statistics we can't stand behind.
- We describe the controls the product actually enforces — nothing aspirational dressed up as shipped.
Need this in writing for a security or procurement review? We're happy to walk your team through the controls in detail. Regional data residency and compliance documentation are available on Enterprise plans. For the practitioner's view of how these controls fit day-to-day data protection practice, see Compliant hiring assessments: a recruiter's guide.
A hiring decision you can defend.
Your data walled off, a full record of what happened, and no candidate answers used to train AI models — so the score you act on holds up to scrutiny. Bring your team's questions and we'll answer them directly.