Compliance
Built for enterprise data protection
Madita was designed for European privacy and AI compliance requirements from day one - not bolted on after the fact.
We protect your data at enterprise level - through full sovereignty, transparent compliance, and thoughtful governance built directly into Madita's architecture.
- GDPR
- EU AI Act
- AES-256
- TLS 1.2+
GDPR Compliance
- Data processing agreement publicly available at madita.ai/self-service-dpa
- Personal data is processed solely to conduct and evaluate the interview and is deleted at the end of the retention period. No model training on candidate data.
- Candidates give their explicit consent to processing in advance. Confirmation is required to start the interview and is logged with text version and timestamp.
- Full data subject rights: all interview data is exportable and deletable on request
- Right to access, rectification, erasure, and data portability honoured on request
EU AI Act Compliance
- Madita is classified as a high-risk AI system under Annex III of the EU AI Act and built accordingly
- Human-in-the-loop: every hiring decision rests with a human - no automated rejections
- Complete audit trail: all interviews are documented with full traceability
- Candidate transparency: candidates are informed before every interview that they are speaking with an AI
- Assessment based solely on role-specific criteria. No inference from voice, name or accent. Evaluations are reviewed regularly for violations of these rules.
Encryption
- All data in transit is encrypted using TLS 1.2 or higher
- All data at rest is encrypted using AES-256
- Cryptographic keys are securely managed and rotated regularly
Certifications & Roadmap
- ISO 27001: certification in preparation.
- SOC 2 Type II: planning in progress
- Vulnerability disclosure policy: report security issues to security@madita.ai
Security questions & DPA
For security reviews, privacy questions, or to request our data processing agreement, reach out directly.
Further details are available in our Data Protection Declaration, Data Processing Agreement - steps to full compliance.
legal@madita.ai