Referable Privacy and Security Overview

At Referable, safeguarding our customers' data and ensuring compliance with legal standards are paramount. We are dedicated to building and preserving our customers' trust, with data security at the forefront. Referable's software, operational protocols and internal policies are designed to adhere to international compliance standards and can be trusted by leading global enterprises.
Cloud Infrastructure and Security
Referable’s platform is hosted on Google Cloud Platform, one of the most secure and compliant platforms in the world. These services, including multi-factor authentication and strong encryption, ensure the security of data in our care.
Digital Transformation of Recruitment Processes
Our platform digitally transforms traditional recruitment tasks like candidate mapping across disparate systems, leading to improved efficiency, accuracy, and data security.
Data Source and Provider Evaluation
We source data from public platforms and perform due diligence on our data providers. This includes assessing their data privacy practices to ensure they align with our standards. Referable Limited does not scrape data.
Data Processing and Legal Compliance
Referable processes public data based on legitimate interest for recruitment activities, ensuring compliance with legal standards. Our approach includes regular reviews of profiles for outdated or expired information.
Data Subject Rights
We uphold the rights of data subjects, including access, rectification, and erasure.
Data Access and Confidentiality
User access to data within Referable is strictly controlled by role-based privileges. We maintain a clear separation between public and customer-provided private data.
Compliant Collaboration Processes
User employees access personal information only when necessary for collaboration and only after a high probability of a relationship has been identified. The Referable application requires users to first agree to confidentiality and data privacy undertakings, and is accessed via a private web link.
Data Encryption and Protection
All data, in transit and at rest, is encrypted. We utilise advanced security protocols to protect customer and Referable data.
Password and Access Management
Referable follows best practices for password security, using strong cryptographic hashing algorithms.
Regular Data Review and Backup
Data is backed up daily, and regular reviews are conducted to ensure the integrity and timeliness of the information.
Team Access and Training
Access to sensitive data is restricted within our team. All Referable personnel are required to agree to confidentiality and data privacy undertakings as part of their engagement terms, and receive regular training on data protection and security protocols.
Proactive Security Measures
We conduct regular network monitoring and penetration testing to identify and address potential vulnerabilities.
Response to Incidents
In the event of a security breach, we have procedures in place to promptly notify affected parties and regulators. To date there have been zero incidents to report.
Automated Security Checks
We leverage automated tools native to Google Cloud Platform, one of the world’s largest and most widely deployed cloud infrastructure providers, to continuously assess and strengthen our security posture.
Data Protection Officer
Our appointed Data Protection and Privacy Officer oversees the implementation and adherence to data protection policies and procedures.
Vulnerability Reporting
We encourage the responsible reporting of any security issues found on our platform through by emailing info@referable.ai
Compliance with Privacy Regulations
We adhere to the New Zealand Privacy Act 2020 (and Information Privacy Principles), the Australian Privacy Act (Cth) (and Australian Privacy Principles (APPs)) as well as the General Data Protection Regulation (GDPR).
Data Integrity and Secure ATS Integration
Referable utilises Applicant Tracking System (ATS) integration via secure API as well as manual checks to maintain data integrity. API integration also ensures all value-added information that supports the identification of suitable talent, is captured and tracked. This integration also enables users to ‘refresh’ inactive applicant data for potential use in the candidate pool.
Avoidance of Unethical Practices
We are committed to ethical recruitment practices, explicitly avoiding methods like 'back door checks' on active applicants. Users are required to check for and remove active applicants within the application before proceeding, and this is achieved automatically when Referable is integrated to the ATS via a secure API connection.
AI Fairness
While also providing ‘masking’ as a feature, our AI matching algorithms are designed to match candidates to employees based on skills and experience, ensuring fairness and avoiding biases in recruitment processes.
2023 Referable Ltd. All rights reserved.