01
Risk management
Document intended use, foreseeable risks and the controls expected across the system lifecycle.
Trust Centre
Trust is an operating requirement.
This centre sets out Areeva’s privacy commitments, responsible-AI principles and EU AI Act readiness framework. Procurement teams can use the dedicated security route for product-specific evidence.
Security and privacy
Clear privacy commitments, rights and accountability.
Areeva’s Privacy Policy identifies AREEVA Limited as the data controller and publishes ICO registration ZC030819. It says contact information is stored in systems hosted in the EU, describes safeguards for transfers outside the EEA, and lists access, rectification, erasure, restriction, portability, objection and automated-decision rights.
AREEVA will delete personal data after 90 days without meaningful contact, unless longer preservation is required by law or a regulator. Security, sub-processor, model-training and incident-response evidence is available through the procurement review process.
Responsible AI
Accountable review belongs in the workflow.
Areeva’s operating principle is simple: AI supports the process while people make the hire. A responsible deployment should define decision boundaries, evidence-review practices and intervention responsibilities for authorised people.
- 01Keep consequential recruitment decisions under effective human oversight.
- 02Make the boundary between AI-supported work and human decision-making clear.
- 03Plan how authorised reviewers can question an output and intervene when needed.
- 04Treat an AI score or ranking as decision support, never as the final hiring decision.
EU AI Act readiness
A readiness conversation for recruitment AI governance.
The EU AI Act lists AI systems intended to analyse or filter job applications or evaluate candidates among the employment uses that can be high-risk. Classification still depends on intended purpose and how the system is used.
Under the current EU implementation timeline, the Annex III high-risk rules apply from 2 December 2027. Areeva’s readiness approach focuses on the governance work teams can do now. It is not a certification, compliance guarantee or legal advice.
Readiness framework
Eight areas for a serious governance conversation.
This framework describes preparation themes, not a compliance determination. Customers should obtain legal advice about their own role and obligations.
02
Data governance
Address relevance, quality, provenance and governance expectations for data used in recruitment workflows.
03
Technical documentation
Maintain system information that helps providers, deployers and reviewers understand design and use.
04
Activity logging
Support traceability with records appropriate to the workflow, oversight model and applicable obligations.
05
Transparency
Give deployers and affected candidates information that supports informed use and appropriate challenge.
06
Human oversight
Ensure people can understand outputs, recognise limitations, intervene and own consequential decisions.
07
Robustness and security
Treat accuracy, resilience and cybersecurity as ongoing system requirements rather than one-time claims.
08
Post-market monitoring
Plan monitoring, feedback, incident handling and corrective action across real-world operation.
Important boundary
Customers should assess prohibited-practice, transparency and high-risk-system obligations for their own intended use. EU AI Act readiness content is informational and is not legal advice.
A clear boundary
Trust becomes useful when principles connect to evidence, owners, controls and review.
Areeva’s Trust Centre brings privacy, responsible AI and regulatory readiness into one place, with a direct route for product-specific procurement information.
See Areeva in your workflow
Bring your trust and procurement questions.
We’ll route security, privacy and responsible-AI enquiries to the right Areeva conversation.