Trust

What we run, and what we don't claim.

The answers a careful buyer wants before a call — including the ones where the honest answer is ‘not yet’.

  • EUhosting for every workspace, UK and EEA included
  • 0candidates auto-rejected — a person decides
  • 2named accounts hold platform administration
  • 7 daysuntil unused public-web data expires
Where your data lives

On EU infrastructure, end to end.

The same hosting serves customers in the UK and the EEA. Nothing about your workspace needs to leave the EU to run.

  • Encrypted in transit and at rest. TLS on every connection; the database and object storage encrypt what they hold.
  • Point-in-time restore. Database history means a bad change is wound back, not rebuilt.
  • Card details never touch Agentiv. Billing runs through Stripe.
Your workspace
  • Application
    Railway
    Amsterdam
  • Database
    Neon
    Frankfurt
  • Files and recordings
    Cloudflare R2
    EU
Encrypted at rest · TLS in transit
Access
  • OwnerOne per workspace — billing, admins, transfer
  • AdminInvites people, sets up the workspace
  • MemberWorks jobs and candidates
Two-factor for every userPlatform admin: 2 named accounts
Isolation

One workspace cannot see another.

Every record carries the workspace it belongs to, and every read and write is checked against the one you're signed into.

  • No shared pool of candidates. What your team captures stays yours — it is never offered to another customer.
  • Roles, not a shared login. People are invited by name into a named workspace.
  • Platform administration is locked to two accounts, enforced in the API, not just hidden in the interface.
What the AI is allowed to do

A person makes every call.

  • It assists. It never selects.

    Agentiv drafts, extracts, matches and prioritises. Nobody is auto-rejected, every fit label shows its reasons, and a person enacts each step.

  • Your data trains nothing.

    Model calls carry only the text a task needs. No shared model learns from your candidates. Models run with a US provider under standard contractual clauses.

  • The EU AI Act, by default.

    Screening is high-risk, and the obligations land on you as the employer. Oversight, logging and reasons on every decision are how Agentiv works, not a setting.

Candidates

The people in your pipeline aren't left out.

You are the controller for the candidates you hold; Agentiv is your processor. Every candidate can easily request the data held about them.

  • Every candidate gets a notice link. It says who holds their data, and why.
  • Opt out or request removal. Candidates can ask to stop contact or have their data removed.
  • Sourcing runs only when you search or reveal — never against the candidates already in your workspace.

Got an email that said Sent via Agentiv? The company that wrote to you uses Agentiv to run its hiring, and is responsible for your data. Their first message carries a link to request the data they hold, or to ask them to stop contact.

What a candidate sees

Your data at Northwind

Name
Aino Virtanen
Current role
Senior Platform Engineer
Where it came from
Applied to a role
Added on
12 September 2026
Kept, then gone
Found on the public web7 days
unless you add them to a job
Revealed contact details12 months
then dropped
Paperwork

Ask, and it's sent.

DPA and subprocessor list

Both sent on request — no sales call first. Customers are told in writing before a subprocessor changes.

Request the DPA

Privacy and terms

Published in full, covering the website, the platform and the browser extension.

Not yet

No SOC 2 or ISO 27001.

Agentiv is early. We hold neither, and won't show an “in progress” badge shaped like one.

Found something? Write to tony@agentiv.app — the founder replies personally.

Hire Smarter, Stay Human.

Everything hiring, in one surface — EU-hosted, human-reviewed, done properly from day one. Ten pilot places, and the founder replies personally.