Security
Trust, Security & GDPR
Last Updated: June 2026
At Candaply, security, compliance and data protection are fundamental to everything we do.
Our platform has been designed to help recruitment agencies, employers and compliance teams securely manage candidate information whilst maintaining compliance with UK GDPR and applicable data protection legislation.
What we protect
Candaply securely manages:
- Candidate CVs
- Right to Work Documentation
- Passport Information
- DBS Certificates
- Professional Registrations
- Employment History
- References
- Compliance Records
- Onboarding Documentation
Security features
Candaply incorporates:
- Encrypted document storage
- Secure cloud infrastructure
- SSL/TLS encrypted communications
- Multi-factor authentication
- Role-based permissions
- Activity and audit logs
- Secure backup procedures
- Data retention controls
GDPR compliance
Candaply processes data in accordance with UK GDPR requirements.
In most circumstances:
- The Client acts as Data Controller.
- Candaply acts as Data Processor.
Data ownership
Your organisation remains the owner of all candidate data uploaded to the platform.
Candaply never sells candidate information.
Trusted document management
Our platform has been specifically developed to support recruitment, onboarding and compliance workflows while maintaining appropriate security and governance controls.
For further information please contact:
privacy@candaply.com
Candaply Limited
England & Wales
We provide Data Processing Agreements to all subscribing organisations.