CV Data Security & GDPR ComplianceFortress-Grade Security.
We have processed 1M+ CVs for recruitment agencies. Compliance is not an afterthought—it's our foundation. Your candidates' CVs are never used to train AI models.
GDPR Compliant
Full compliance with European data protection regulations. Right to be forgotten supported.
No AI Training on Your Data
Client CVs are never used to train AI models. Built to align with EU AI Act principles for transparent, human-led AI use.
AES-256 Encryption
Data is encrypted at rest and in transit using bank-grade standards.
Data Processing Agreement on Request
We provide a Data Processing Agreement (DPA) on request to support your EU and UK GDPR compliance. Need specific data hosting requirements? Talk to us.
Request our DPASecure CV Formatting Services
Enterprise-grade security features for your candidate data.
End-to-End Encryption
Encryption in transit and at rest for all CV data processing and storage.
GDPR Compliance
Full compliance with EU data protection regulations and privacy standards.
Secure Infrastructure
Hosted on enterprise-grade cloud infrastructure with restricted access and continuous monitoring.
Access Control
Role-based permissions and robust authentication for your team.
Data Retention
Configurable data retention policies to meet your legal requirements.
Security Controls
Customizable security settings and detailed audit logs.
How CVFormatter handles candidate data
CVs are full of personal data, so we treat security and privacy as part of the product, not an afterthought. When your agency uses CVFormatter, you remain the data controller and CVFormatter acts as your data processor, processing candidate data only on your documented instructions to deliver the formatting and enhancements you request.
Data is encrypted in transit and at rest. Client CVs and candidate data are never used to train AI models, and you can erase CVs from your account whenever you need to, in line with your own retention policy.
GDPR support for your procurement team
Security reviews shouldn't hold up a purchase. Here is what we provide to procurement and compliance teams:
- Data Processing Agreement (DPA) available on request, setting out our obligations as your data processor.
- Privacy Policy written to support compliance with the EU GDPR, UK GDPR, Australia's Privacy Act, Singapore's PDPA and the California CCPA/CPRA.
Access control inside your agency
Every plan includes unlimited users, so there is no temptation to share logins. Admins manage roles and permissions for each team member, and every CV is kept in a searchable history with versions and timestamps, so you always know what was processed and when.
CVFormatter is operated by Aimanack LLC. For security questionnaires or documentation, email admin@cvformatter.co.
Customer story
How NAHC.io replaced part-time CV formatting with formatted CVs in under a minute
“The platform is exceptionally user-friendly, with responsive support from the team.”
Security only works if the tool is simple enough that people don't work around it. Here is how one staffing agency standardised its CV process.
The challenge
NAHC.io relied on part-time staff to format candidate CVs as demand rose and fell. Consultants waited hours for formatted documents, and every CV had to be brought into the same format by hand before it could go to a client.
What changed
The team moved CV formatting onto CVFormatter, which now standardises every candidate CV to a consistent format before it is shared with clients. In Lawrence's words, the problem it solves is “standardizing candidates' CVs to a consistent format before sharing them with our clients.”
The result
Formatted CVs now come back in under a minute instead of after hours of waiting, the team has saved many hours of paperwork, and Lawrence titled his G2 review “Significantly saves our time at a fraction of the original cost.”
Data security and GDPR FAQs
- Are our candidates' CVs used to train AI?
- No. Client CVs and candidate data are never used to train AI models. They are processed only to deliver the output you request.
- Is CVFormatter GDPR compliant?
- CVFormatter is designed to support GDPR and UK GDPR compliance. We act as your data processor and provide a Data Processing Agreement (DPA) on request.
- Who is the data controller?
- Your agency is the data controller for candidate data you upload. CVFormatter is the data processor and processes it only on your instructions.
- Can we delete candidate data?
- Yes. You can erase CVs from your account at any time, in line with your own data retention policy.
- Is candidate data encrypted?
- Yes. Data is encrypted in transit and at rest.