Trust & security

Data security

How does Instalent secure my data?

Instalent protects personal data with appropriate technical and organisational measures and reviews its security practices regularly. The specific measures we apply are described in our Privacy Policy. No system is perfectly secure, but Instalent works to protect your data and to respond promptly to any incident.

Does Instalent store my email or account passwords?

No. Multi-channel account connections are established and managed through Unipile, Instalent's integration partner. Instalent does not require, store or handle your account passwords directly, and you can disconnect any connected account at any time, which revokes access.

Privacy & GDPR

How does Instalent approach GDPR, and who is the controller?

Instalent is built by an EU company (Sacore AB, Sweden) and processes personal data under the GDPR. For candidate sourcing, once a customer saves or acts on a profile the customer is the controller for their own activity, governed by Instalent's Data Processing Agreement. Instalent provides the tooling; the customer is responsible for using it lawfully. See our Privacy Policy and DPA for the full detail.

How long does Instalent keep sourced candidate data?

Sourced professional information is kept only as long as it stays accurate and relevant, and is revalidated or deleted on a rolling basis - in practice, typically within three months - unless there is a legal reason to keep it longer.

How can someone be removed from Instalent's sourcing data?

Anyone can exercise their rights, including removal, through the opt-out form or by emailing jon@instalent.io. Valid requests are actioned without undue delay and within one month. Complaints can be lodged with a supervisory authority - in Sweden, the Swedish Authority for Privacy Protection (IMY).

Responsible AI

Does Instalent make automated decisions about candidates?

No. Instalent may rank, score or summarise profiles against the criteria a customer defines, to support a human user's judgement. It does not make solely automated decisions with legal or similarly significant effects - the decision whether to contact, shortlist or engage anyone always rests with the human customer.

Does Instalent train AI models on candidate data?

No. Instalent does not use sourced professional data to train general-purpose AI models. Scoring is evidence-based and explainable, tied to the criteria the customer set.

Data sources & sub-processors

Where does Instalent's candidate data come from?

Instalent searches information that is already publicly available - across the open web, public code and professional-network signals - and verifies contact details against multiple sources, rather than reselling a single private database.

Which sub-processors does Instalent use?

A small set of trusted providers, including cloud hosting and infrastructure (for example AWS and Google Cloud), multi-channel communication integration (Unipile), payment processing, email delivery, professional-data and contact-enrichment providers, EU-processed privacy-friendly analytics, and customer-support tooling. A current named list is available on request at jon@instalent.io.

Your responsibilities

What am I responsible for as a customer?

You control the searches you run and the outreach you send, and you are responsible for using Instalent - and any connected accounts - in line with local data-protection rules and the terms of the underlying platforms. Instalent's Acceptable Use and Sending policies set out the guardrails.