Skip to main content

​
Purpose

Straight answers for security and procurement reviewers, so you can assess the platform without waiting on a sales cycle. Certifications are shown with their current, accurate status.

​
Self-serve review checklist

Exterview is an intelligence layer above your ATS. It evaluates candidates and produces reports; it is not your system of record. That narrows what data it needs. Work through these steps to review the platform:
1

Review the access model

Access is role-based and specific to your organization. Review the nine system roles and the per-module access matrix in How to Assign Roles and Access.
2

Review data handling

See what data is processed, how long it is retained, and how deletion and consent work in Privacy and Residency.
3

Review the model and sub-processor posture

Confirm which models process data and that your data is not used to train shared models in Models We Use, and review third parties in Sub-processors.
4

Review AI governance

Confirm human review on adverse decisions, explainability, and disclosure in Responsible AI.
5

Review the audit trail

See what is logged and how changes are traced in Auditability.
6

Check certification status

Review current and in-progress attestations below. Treat anything not listed as not in place.
Controls you hold: role-based access specific to your organization, set by you · human review on adverse decisions, which cannot be turned off · data residency and consent, configured during setup in How to Set Compliance and Privacy · a full audit trail on privileged actions · deletion of candidate records on request. Upcoming: governance retention settings; see Privacy & Residency.
This checklist doesn’t replace a formal security questionnaire, for that, work with your Exterview contact. Implementation-level security details are shared under review rather than published, because they can change and warrant legal and security sign-off.

​
Certifications & frameworks

Exterview’s certification posture is shown with current, accurate status. Certifications are earned, not claimed, anything not yet held is marked in progress.
Certified means an independent audit is complete. In progress means the program is underway but not yet awarded. Legal obligation marks a law, not a certification: Exterview does not claim certification or compliance attestation against it, and the controls in place are described in Privacy & Residency. Available on request means Exterview can discuss meeting the requirement for a regulated pilot, while we finish a few additional requirements for regulated industries.
Current certificates, audit reports, and evidence are available to customers and prospects under NDA, contact your Exterview representative. Exterview does not claim certifications it does not hold.

​
Procurement FAQs

No. Human review applies to outcomes; no fully autonomous adverse decision is made. See Responsible AI.
Only to run your evaluations, scoped to your organization’s data. It isn’t sold or pooled into a shared model. See Privacy & Residency.
Identity Verification is Upcoming. As designed, it checks a photo ID against a face photo, handled separately from candidate scoring and used only to confirm identity, never to score a candidate or make a hiring decision. See Responsible AI.
Not on consequential steps. AI Employees run with the access rights of the person using them, and creating a role, publishing a job or contacting a candidate always waits for a person’s approval. No AI system sets a candidate to hired, rejected or withdrawn. See AI Employees.
Yes. A candidate’s records can be deleted on request, one at a time or in bulk. Upcoming: governance retention settings that apply deletion consistently across all data types. See Privacy & Residency.
Roles and permissions, scoped to your organization, following least privilege. See Security.
Yes. The Activity Log records every action on your account, by a person or by an agent. Score overrides and decision changes carry a stated reason. See Auditability.
Connectors move only the data needed to run or support a workflow, under your governance and consent settings.
In the region you select during setup, to support residency requirements.
  • Security. Architecture-level security posture in more detail.
  • Responsible AI. How human review and explainability are enforced.