How does RChilli comply with GDPR regulations?

RChilli demonstrates a strong commitment to both GDPR (General Data Protection Regulation) compliance. Here's how these standards are upheld within RChilli’s solutions and practices:

GDPR Compliance

RChilli ensures GDPR compliance through robust data privacy and protection mechanisms embedded in its platform and services:

✅ Data Security and Privacy

• All REST APIs developed by RChilli follow industry best practices for security.

• Certified under ISO/IEC 27001:2022 and SOC 2 Type 2, RChilli ensures that personal data is handled with high-level safeguards, reducing the risk of data breaches and unauthorized access.

✅ Data Control and Access

• Customers have full control over their data. RChilli does not store parsed resume data unless specifically indexed for Search and Match functionality. Even then, the data is stored temporarily and can be deleted via API calls like DeleteAllDocuments.

✅ Right to Be Forgotten

• RChilli allows customers to delete all indexed documents and resume data, supporting GDPR’s “Right to Erasure” provisions.

✅ Regional Server Choice

• Users can choose server locations in US, EU, or SG, aligning data residency with GDPR requirements. The EU option specifically ensures that European data stays within compliant jurisdictions.

If you need more details or assistance implementing these features, feel free to contact: support@rchilli.com