What we run, and what we don't claim.
The answers a careful buyer wants before a call — including the ones where the honest answer is ‘not yet’.
- EUhosting for every workspace, UK and EEA included
- 0candidates auto-rejected — a person decides
- 2named accounts hold platform administration
- 7 daysuntil unused public-web data expires
On EU infrastructure, end to end.
The same hosting serves customers in the UK and the EEA. Nothing about your workspace needs to leave the EU to run.
- Encrypted in transit and at rest. TLS on every connection; the database and object storage encrypt what they hold.
- Point-in-time restore. Database history means a bad change is wound back, not rebuilt.
- Card details never touch Agentiv. Billing runs through Stripe.
- AmsterdamApplicationRailway
- FrankfurtDatabaseNeon
- EUFiles and recordingsCloudflare R2
- OwnerOne per workspace — billing, admins, transfer
- AdminInvites people, sets up the workspace
- MemberWorks jobs and candidates
One workspace cannot see another.
Every record carries the workspace it belongs to, and every read and write is checked against the one you're signed into.
- No shared pool of candidates. What your team captures stays yours — it is never offered to another customer.
- Roles, not a shared login. People are invited by name into a named workspace.
- Platform administration is locked to two accounts, enforced in the API, not just hidden in the interface.
A person makes every call.
It assists. It never selects.
Agentiv drafts, extracts, matches and prioritises. Nobody is auto-rejected, every fit label shows its reasons, and a person enacts each step.
Your data trains nothing.
Model calls carry only the text a task needs. No shared model learns from your candidates. Models run with a US provider under standard contractual clauses.
The EU AI Act, by default.
Screening is high-risk, and the obligations land on you as the employer. Oversight, logging and reasons on every decision are how Agentiv works, not a setting.
The people in your pipeline aren't left out.
You are the controller for the candidates you hold; Agentiv is your processor. Every candidate can easily request the data held about them.
- Every candidate gets a notice link. It says who holds their data, and why.
- Opt out or request removal. Candidates can ask to stop contact or have their data removed.
- Sourcing runs only when you search or reveal — never against the candidates already in your workspace.
Got an email that said Sent via Agentiv? The company that wrote to you uses Agentiv to run its hiring, and is responsible for your data. Their first message carries a link to request the data they hold, or to ask them to stop contact.
Your data at Northwind
- Name
- Aino Virtanen
- Current role
- Senior Platform Engineer
- Where it came from
- Applied to a role
- Added on
- 12 September 2026
Ask, and it's sent.
DPA and subprocessor list
Both sent on request — no sales call first. Customers are told in writing before a subprocessor changes.
Request the DPAPrivacy and terms
Published in full, covering the website, the platform and the browser extension.
No SOC 2 or ISO 27001.
Agentiv is early. We hold neither, and won't show an “in progress” badge shaped like one.
Found something? Write to tony@agentiv.app — the founder replies personally.
Hire Smarter, Stay Human.
Everything hiring, in one surface — EU-hosted, human-reviewed, done properly from day one. Ten pilot places, and the founder replies personally.