2 of 10 pilot places taken
Trust

What we run, and what we don't claim.

The answers a careful buyer wants before a call — including the ones where the honest answer is ‘not yet’.

  • EUhosting for every workspace, UK and EEA included
  • 0candidates auto-rejected — a person decides
  • 2named accounts hold platform administration
  • 7 daysuntil untouched public-web results are deleted
Where your data lives

On EU infrastructure, end to end.

The same hosting serves customers in the UK and the EEA. Your workspace is stored in the EU; AI models and some search sources process outside it, and each one is named in the subprocessor list.

  • Encrypted in transit and at rest. TLS on every connection; the database and object storage encrypt what they hold.
  • Personal files in private storage. CVs, applications, signed documents and the photos you upload of candidates and contacts open only through a signed-in, workspace-checked request or the signer’s own link.
  • Deleting means the files too. Delete a candidate and their CVs, documents, signatures, photos and interview recordings go with them.
  • Point-in-time restore. Database history means a bad change is wound back, not rebuilt.
  • Card details never touch Agentiv. Billing runs through Stripe.
Your workspace
  • Application
    Railway
    Amsterdam
  • Database
    Neon
    Frankfurt
  • Files and recordings
    Cloudflare R2
    EU
Encrypted at rest · TLS in transit
Access
  • OwnerOne per workspace — billing, admins, transfer
  • AdminInvites people, sets up the workspace
  • MemberWorks jobs and candidates
Two-factor available to every userPlatform admin: 2 named accounts
Isolation

One workspace cannot see another.

Every record carries the workspace it belongs to, and every read and write is checked against the one you're signed into.

  • No shared pool of candidates. What your team captures stays yours — it is never offered to another customer.
  • Roles, not a shared login. People are invited by name into a named workspace.
  • Platform administration is locked to two accounts, each with two-factor enrolled, enforced in the API, not just hidden in the interface.
  • An audit log your admins can read. Sign-ins and failed attempts, two-factor changes, admin actions, membership changes and integration connections, each with IP and time. Append-only, kept 12 months, exportable as CSV.
What the AI is allowed to do

A person makes every call.

  • It assists. It never selects.

    Agentiv drafts, extracts, matches and prioritises. Nobody is auto-rejected, every fit label shows its reasons, and a person enacts each step.

  • Your data trains nothing.

    Model calls carry only the text a task needs, with provider-side storage switched off. No shared model learns from your candidates, and our AI gateway logs metadata, not content. Models run with a US provider (OpenAI) under standard contractual clauses.

  • The EU AI Act, by default.

    Screening is high-risk, and the obligations land on you as the employer. Oversight, logging and reasons on every decision are how Agentiv works, not a setting.

Candidates

The people in your pipeline aren't left out.

You are the controller for the candidates you hold; Agentiv is your processor. Every candidate can easily request the data held about them.

  • Every candidate gets a notice link. It says who holds their data, and why.
  • Opt out or request removal. Candidates can ask to stop contact or have their data removed.
  • Sourcing runs only when you search or reveal — never against the candidates already in your workspace.

Got an email that said Sent via Agentiv? The company that wrote to you uses Agentiv to run its hiring, and is responsible for your data. Their first message carries a link to request the data they hold, or to ask them to stop contact.

What a candidate sees

Your data at Northwind

Name
Aino Virtanen
Current role
Senior Platform Engineer
Where it came from
Applied to a role
Added on
12 September 2026
Kept, then gone
Found on the public web7 days
unless your team works with them
Raw contact-lookup data90 days
then erased
Revealed contact details12 months
then withdrawn, unless you are still in touch
Paperwork

Ask, and it's sent.

DPA and subprocessor list

The subprocessor list is published; the DPA is sent on request — no sales call first. Customers are told in writing before a subprocessor changes.

Request the DPASubprocessors

Privacy and terms

Published in full, covering the website, the platform and the browser extension.

Privacy policyTerms
Not yet

No SOC 2 or ISO 27001.

Agentiv is early. We hold neither, and won't show an “in progress” badge shaped like one.

Found something? Write to tony@agentiv.app — the founder replies personally.

Hire Smarter, Stay Human.

Everything hiring, in one surface. EU-hosted, human-reviewed, done properly from day one. Ten pilot places, and the founder replies personally.