Candidate data is borrowed data. We collect as little of it as we can.
An assessment runs on data collected at one of the more vulnerable moments in a working life. So we collect as little of it as we can, keep it for as short a time as we can, and never use it for anything else.
Candidate data is borrowed data.
KVKK and GDPR alignment
Our processes are designed to align with KVKK and GDPR: a clear privacy notice, explicit consent and a strictly limited processing purpose. We hold no independent certification yet, and we do not claim one we do not have.
Candidate rights
A candidate can ask what is held about them, ask for a correction and ask to be erased; a person answers each request in writing. When an erasure is carried out, the candidate record, the simulation run and the report go together.
No training on customer data
Candidate transcripts and report content never train any model. This is not a policy preference but an architectural rule: assessment data is never carried into a training pipeline.
Access control and audit trail
A report is reachable only by the users assigned to that hiring process. Decisions -- a report published, approved or returned -- are written to a record that cannot be changed afterwards, not even by Sezra's own database connection.
Data residency and retention
Hosting is offered in the European Union or in Türkiye. Retention is set in the contract, and records are deleted once the period ends.
Read our wording closely
Where this page says “designed to align with”, that is precisely what we mean. When we pass an independent audit, the certificate number will appear here alongside it.
Ready for your security review. The questions get answered before the call, not after it.
Send your information security team's questionnaire ahead of time and we come to the call with the answers.
Or leave us a short message: Contact form