Built UAE PDPL and GDPR-aligned, from day one.
Ospraye is UAE-first and designed to the UAE’s Personal Data Protection Law, with GDPR alignment built in for readiness beyond it. This page is a plain-language summary of how candidate data is handled — not a substitute for the full data processing agreement.
Consent, captured
Candidates consent to AI-assisted review at the apply form, and to the voice interview separately, before it happens. Every consent is timestamped and kept on record.
AI, always disclosed
The AI voice interview opens with an explicit, spoken statement that the candidate is speaking with an AI. It is never editable or removable by a recruiter — that's a hard rule, not a setting.
A human decides
AI screens and ranks; a human recruiter makes the final call. The pipeline produces a shortlist for review, never an automatic, irreversible rejection.
Configurable retention
How long applications, recordings, and transcripts are kept is a setting each agency controls, enforced automatically — not a fixed, one-size-fits-all default.
Erasure and portability
A candidate's data can be deleted or exported on request. Ownership of that data sits with the candidate, not with Ospraye or the agency.
Who owns what
Candidates own their personal data. Agencies own their recruiting relationship and process data, isolated to their own tenant. Ospraye only holds anonymised, aggregated insight — never identifiable candidate data — as its own asset.
Where data lives
The platform is cloud-agnostic and on-premise capable — the same system can run in the cloud or fully in-country for agencies with stricter data-residency requirements, with no separate codebase to maintain.
Questions or requests
For a data access, correction, deletion, or portability request, or any question about how your data is handled, reach us at privacy@ospraye.ai.