Does RChilli use personal or sensitive data for AI training?

RChilli demonstrates a strong and transparent commitment to data privacy and security, particularly in the context of AI training and processing. Here’s a detailed overview of how RChilli handles data privacy when leveraging artificial intelligence:

🔐 Commitment to Data Privacy in AI Training

1. No Storage Policy for Resume Parser API

RChilli’s Resume Parser API does not store resume data. This design ensures that once parsing is completed, the data is not retained by RChilli, reducing the risk of unauthorized access or misuse. This aligns with privacy-first design principles in AI workflows.

2. Controlled Data Indexing for Search & Match

For features like Search and Match, RChilli temporarily indexes data in a secure, region-specific environment to facilitate candidate-job matching. This data is stored only for search operations and can be deleted at any time by the client using the DeleteAllDocuments API.

3. Global Data Center Options

RChilli enables clients to choose their data center location (e.g., US, Europe, Singapore, Jeddah) during account setup. This gives clients control over where their data is processed and helps them comply with local data residency regulations.

🔍 AI & Machine Learning Use with Privacy Controls

1. AI-Driven Parsing with LLMs

RChilli has integrated Large Language Models (LLMs) such as OpenAI's GPT into its parsing solutions to improve context-aware data extraction. Access to LLMs is managed through secure API key-based authentication, ensuring all interactions are authorized and compliant.

2. Data Redaction Capabilities

RChilli supports redaction of sensitive fields (e.g., gender, religion, location) using APIs like Resume Templater and Essential Data Enhancer, promoting bias-free recruitment while protecting personally identifiable information (PII).

📜 Certifications and Compliance

RChilli is certified in the following data security and compliance standards:

• ISO/IEC 27001:2022

• SOC 2 Type 2

• HIPAA

• PCI DSS

• GDPR-compliant processing and search architecture.

Additionally, FedRAMP Moderate certification is in progress, signaling an expanding commitment to US federal-level security standards.

💡 Why This Matters for AI Training

While RChilli uses AI to power resume parsing and matching, it ensures:

• No unauthorized data usage for training.

• API-level privacy controls to anonymize data.

• Clear data deletion paths and user-managed data control.

• Transparent and region-specific infrastructure for data sovereignty.

📩 Need More Help or a Security Review?

If you're interested in a deeper dive into RChilli’s security architecture or need documentation for compliance purposes, contact the support team at support@rchilli.com