Handle data protection questionnaires before they block a placement
Enterprise and public sector employers increasingly require data protection supplier assessments before onboarding a recruiter. You handle candidate data at volume — clients want evidence of how you do it. Verifill builds your UK GDPR evidence base and auto-drafts every response so the deal can move forward.
The questions enterprise clients ask — and how Verifill answers them
As a recruiter, you are a data controller for candidate information. Enterprise and public sector clients want evidence that you handle this data correctly before they'll work with you. Verifill maps your confirmed practices to each area of UK GDPR they typically ask about.
Documenting your lawful basis for collecting and processing candidate and client data — legitimate interests, contract, and consent.
How long you retain CVs and application data, how candidates access or delete their records, and how you handle subject access requests.
Who you share candidate data with, under what agreements, and what safeguards are in place — including background checking partners.
Your procedures for detecting, containing, and reporting personal data breaches — including the 72-hour ICO notification obligation.
Whether you require a DPO, who is responsible for data protection in your organisation, and how it is managed in practice.
Candidate and client-facing privacy information — what you collect, why, how long you keep it, and who to contact.
No written policies? Verifill generates them from what you actually do
The onboarding interview asks plain-English questions about how your agency actually operates — what data you collect, who can access it, how long you keep it, and what happens if something goes wrong. From your answers, Verifill generates a data protection policy and privacy notice specific to your agency.
Only confirmed practices are included. Where you don't have a process in place, Verifill labels the gap explicitly rather than inventing a policy you don't follow.
Covers your lawful basis, data categories, retention periods, third-party processors, and breach response — based only on your confirmed practices.
Plain-English notice covering what you collect, why, how long you keep it, and how candidates exercise their rights under UK GDPR.
Your next enterprise deal
doesn't need to stall on a questionnaire
Upload your security documents once. Let Verifill handle the next vendor assessment — and every one after that.
£99/month after the trial. No credit card required to start.