Compliance with confidence

From consent to access and retention, our efficient system supports your compliance obligations, without burying you in admin. Fair processes, clear audit trails and effortless data housekeeping are all built in, allowing you to manage even the most sensitive data with confidence.

A man sat at a desk using a laptop

Simple consents, maximum protection

Our GDPR compliant ATS ensures candidates are in control of their own data from the start. Consent is captured and managed through our dedicated candidate portal, and no application proceeds without consent being agreed.

Candidates can also access clear information on data usage, retention and their rights as data subjects via the portal.
Diagram showing different candidate statuses

Customised control

Align data retention rules with your own in-house GDPR policies. Customise retention periods for different candidate criteria and make the most of extended reporting periods for talent pool data.

While consent is active, our smart system auto-populates candidate details, saving time and reducing manual input. Automated data purging ensures you’ll never hold onto outdated data.

All successful applicant data is transferred securely and seamlessly to your HRIS system via API. Keeping sensitive data protected and secure at all times.

Audits with integrity

Every action taken in Reach ATS is tagged with the user’s name and timestamp. It’s easy to see who did what and when. Clear and transparent audit trails demonstrate data integrity and accountability throughout your entire hiring process.

Going above and beyond

At Reach ATS, we believe certification is just the starting point. We don’t just meet industry standards; we actively work to build upon them, ensuring our platform is always a step ahead of upcoming regulations.

From information security and ESG to accessibility, you can trust our commitment to support your hiring compliance.

Data requests without the drama

Forget trawling multiple accounts for information. When you keep all your candidate communication within Reach ATS, managing data requests becomes simple.

DSARs are fulfilled and ready to send in seconds. ‘Right to be forgotten’ data deletion requests are honoured and dealt with immediately. Ensuring your organisation builds a reputation for doing the right thing, consistently.

DEI Reporting, with care

Securely capture DEI within Reach using intuitive customisable forms that record as much, or as little detail as you need (e.g. ethnicity, social mobility, sexual orientation). Simple tools allow HR teams to control visibility of sensitive data to specific users only, and reporting is delivered through anonymised insights to ensure no individual’s identity is ever compromised.

FAQs

How does Reach ATS help you stay GDPR compliant when hiring?

Our GDPR compliant applicant tracking system records candidate consent at the point of application, follows your specific data retention policy requirements, supports DSAR and deletion requests, and keeps a full audit history of changes. With version control, username tagged action logs, and automatic purging of expired data, our smart features keep you aligned with GDPR without burying you in admin.

How is candidate consent handled in a GDPR compliant ATS?

Candidates are required to provide consent to process their personal information at the point of application. An application cannot proceed without consent. The candidate portal features a clear check box and link to your organisation’s privacy policy where they can learn about how you process data and their rights as data subjects under GDPR.

Can candidates ask for their data to be deleted?

Candidates can of course request the “right to be forgotten” and can withdraw consent at any time. If this happens, all personal data linked to that record can be removed in Reach ATS in one simple action.

How does a GDPR compliant applicant tracking system support DSARs?

At the click of a button all information linked to an email address is prepared in a downloadable file ready to be sent. This makes the process of managing DSARs from candidates simple and, as long as all communication takes place within the system, can be completed in seconds.

Does Reach ATS provide audit trails for GDPR purposes?

Yes. All changes or actions made in the system are logged with the username and timestamp. This log helps you prove data integrity and allows teams to investigate data subject queries with ease. HR teams can view a candidates’ entire journey with your company, including all communications and decisions made, for a transparent and fully auditable process.

How does Reach ATS comply with wider security and industry standards?

Reach ATS supports industry leading practices for both information security and accessibility. Our company is certified to ISO 27001 (the international standard for information security management) and Cyber Essentials Plus.  Our candidate portal is AA WCAG 2.2 accredited.