Assuring Top-Tier Security & Data Privacy Standards

Overview:

Symbal's AI-driven recruitment solutions provide a secure, automated, and customized experience for your organization. Leveraging merge.dev to integrate with your organization’s ATS, our services prioritize data safety and privacy with customizable solutions that can be hosted on-premises or through secure cloud platforms like Microsoft Azure, Google Cloud, or your choice of cloud service provider. This report highlights our commitment to delivering secure data management for talent sourcing, engagement, and candidate analysis.

1. Seamless ATS Integration via Merge:

Through Merge, Symbal connects securely with your organization’s ATS, adhering to ISO 27001, HIPAA, CCPA, and SOC 2 Type II standards. Merge ensures data encryption in transit (TLS 1.2+) and at rest (AES-256), providing secure data transfers between our systems.

2. Secure Data Storage and Handling:

Candidate data, including contact information and job statuses, are temporarily stored in an SQL Database with automated threat detection, transparent encryption, and robust access management. This database is on-premises as a separate entity, accessible only to your organization.

3. AI-Powered Communication System:

Our AI texting, analysis, and calling system, which can be hosted on your choice of cloud provider platforms follows stringent encryption protocols to ensure data security. During interactions, candidates are informed about AI engagement and recording for compliance purposes.

4. Customizable Data Storage Options:

Candidate interactions and call recordings can be stored either on your organization’s on-premises servers or your choice of cloud provider, depending on the preferred solution. Both offer robust encryption and strict access controls to guarantee high data integrity and security.

5. Reporting and Integration Workflow:

After interactions, Symbal generates detailed reports containing transcripts and insights that are securely transmitted back to your organization’s ATS via Merge for seamless integration and efficient candidate management, again to the choice of your cloud provider.

6. Privacy-Compliant Data Types:

Symbal processes contact, activity, and pipeline data through Merge. We strictly follow privacy guidelines under Merge’s world-class privacy policies, ensuring transparency and compliance with global data regulations.

7. Rigorous Access Controls and Security Management:

  • Least Privilege Principle: Symbal employees are granted minimal, role-based access to Merge, reducing internal security risks.
  • Employee Training: Symbal team members receive regular security training to align with our data security policies.
  • Access Control: Strict authentication and access measures protect sensitive information.
  • Continuous Monitoring: Automated systems safeguard security settings and logs.

8. Comprehensive Logging and Traceability:

Symbal's system logs all AI interactions and activities, allowing complete traceability back to the executed actions and data sent. This thorough logging ensures accountability and supports your organization’s compliance needs with full visibility into data handling. 

9. Adherence to Predefined Questioning Policy:

Symbal's AI screening system strictly adheres to a predefined questioning policy, answering only questions for which information is available. This approach prevents misinformation and hallucinations by refraining from answering questions outside the provided data framework, ensuring accurate and reliable information delivery.