Trust center refreshed daily

Security and GDPR compliance at Kalent

Kalent is a French company that processes candidate data on behalf of European recruiters. We hold a SOC 2 Type 2 report, we publish 47 controls in a public trust center, and every candidate can have their profile deleted in one click.

What we hold

Three things a buyer can verify today

Every claim on this page is published in our trust center, which refreshes daily. Nothing here is a statement of intent.

SOC 2 Type 2 report

Not a Type 1 snapshot. A Type 2 report covers how controls actually operated over a period of time. The report is available on request through the trust center.

GDPR

Kalent is a French company subject to the GDPR, not a US vendor claiming adequacy. Our data partners are GDPR compliant, and candidates can exercise erasure directly on our site.

47 monitored controls

Forty-seven controls and five policy documents are tracked continuously and published publicly, across five families. You do not need to sign an NDA to see the list.

The 47 controls

Five families, published in the open

Cloud security

Host hardening, firewalls, vulnerability scanning.

Application security

Source control and encryption.

Business operations

Production deployment, access control, periodic control reviews, and fifteen more.

Human resources

Termination process, disciplinary process, HR policy, and four more.

Documentation

Five policy documents kept current and available.

Refresh cadence

The trust center states its last refresh on every visit. It is monitored, not published once and forgotten.

Candidate rights

The people in the database can remove themselves

A sourcing platform holds data about people who never signed up for it. That is the hard part of the GDPR, and it is the part most vendors leave to a support ticket.

One page, no account

Any candidate can ask for their profile to be deleted at kalent.ai/opt-out. No login, no request form buried in a policy.

A named contact

Data protection questions go to rgpd@kalent.ai, and the full policy is in our privacy policy.

Questions we get in security reviews

Straight answers

Does Kalent have a SOC 2 report?

Yes. Kalent holds a SOC 2 Type 2 report, listed under Compliance in the public trust center at trust.kalent.ai.

Is Kalent a European company?

Yes. Kalent is a French company registered under SIREN 953550597, incorporated on 9 June 2023, with its head office at 10 B quai Turenne, 44000 Nantes, France.

How many security controls does Kalent monitor?

Forty-seven, across business operations, cloud security, application security, documentation and human resources. They are listed publicly in the trust center along with five policy documents.

How can a candidate have their data deleted?

Through kalent.ai/opt-out, without creating an account. Data protection requests can also be sent to rgpd@kalent.ai.

Are Kalent data providers GDPR compliant?

Yes. All of our data partners are GDPR compliant, and candidate data is processed transparently and with the necessary consent.

Send this page to your security team

Everything above is verifiable in one click, and the report is available on request.