Privacy and AI-hiring rules, per candidate
Before a test, each candidate tells us where they are. SHOWCASE then applies the rules for that place: the notices they read, what they’re asked to agree to, whether the camera is optional, and how long their data is kept. If something has to be in place first, the test doesn’t start until it is.
Everywhere
- A person decides. The AI drafts a level with reasons. Someone at the hiring company reads it, writes a note, and makes the decision. The level is never an automatic rejection.
- No face, voice, or emotion analysis. The assessing model never sees the candidate’s video, name, or location.
- Told before they start. Candidates see what’s recorded, how the AI assessment works, and their rights before the timer starts.
- Accommodations. Candidates can ask for more time or a different setup before they start.
- Data requests. Candidates can ask for a copy, deletion, an explanation of their result, a review by a person, or another way to be assessed, at showcase.us.com/request.
- No other use. Candidate data is used only for the hiring company’s review. It’s never sold or used to train AI models.
- Deleted on schedule. Retention limits for each place are applied automatically.
- Few third parties. The test pages load no outside fonts or scripts. Our providers are listed on one page.
By place
| Where the candidate is | What SHOWCASE applies |
|---|---|
| New York City | Local Law 144: the test won’t start until there’s a bias audit from the past year with a public summary, and the candidate was notified 10 business days ahead. Candidates can ask for another way to be assessed. |
| US states | Each state’s notices and record-keeping. For example: Illinois’s notice that AI is used in hiring, California’s privacy notice and 4-year record retention, Colorado’s right to an explanation, and recording consent where every party must agree. |
| EU and EEA | GDPR: a full privacy notice, an explanation of how the AI assessment works, and the choice of a review by a person only. The camera is always optional, with no reason needed. Data is kept only as long as that country’s guidance allows, from 4 weeks to 2 years, and recordings for 30 days. Follows the EU AI Act’s ban on emotion recognition. |
| UK and Switzerland | UK GDPR and the Swiss data protection act, with the same protections as the EU. |
| Canada | PIPEDA notices. In Quebec, the AI assessment is off unless the candidate turns it on. |
| Other countries | A notice of the candidate’s local rights, a separate choice to agree to processing in the US, and the option of a review by a person only. |
| Where Claude isn’t available | The test can’t run, and the candidate is told why. |
Hiring in Europe
Before candidates in the EU, UK, or Switzerland can start, we sign a data processing agreement with you that includes the EU standard contractual clauses (with the UK and Swiss addenda). We also give you drafts of the impact assessment and legitimate interest assessment, which your company signs. You decide; SHOWCASE processes data only for you.
Who processes the data
SHOWCASE runs in the United States, with Anthropic (Claude), Daytona (the test workspace), and Railway (hosting). Their contracts limit them to running tests for us: none may use candidate data to train AI models or for its own purposes. See the providers and their safeguards.
Questions
Does SHOWCASE support NYC Local Law 144?
Yes. For candidates in New York City, the test won’t start until there’s a bias audit from the past year with a public summary and the candidate was notified at least 10 business days ahead, and candidates can ask for another way to be assessed.
Is the AI assessment an automated decision?
No decision is made automatically. The AI drafts a level with reasons, and a person at the hiring company reads it, writes a note, and decides. The level is one input, never an automatic rejection.
Is video or facial analysis used?
No. The assessing model never sees video, and SHOWCASE doesn’t analyze faces, voices, or emotions. In Europe the camera is always optional.
Where is candidate data processed?
In the United States, by SHOWCASE and its providers Anthropic, Daytona, and Railway. Transfers from Europe use the EU standard contractual clauses, and from other countries the candidate agrees separately.
How long is candidate data kept?
It depends on where the candidate is: for example 4 weeks in the Netherlands, 6 months in Germany and the UK, and at least a year in the US where the law requires it. Recordings from Europe are deleted after 30 days. Deletion is automatic.
This page describes what SHOWCASE does. It isn’t legal advice, and you’re responsible for how you use SHOWCASE in your hiring. Questions: wittman.c@gmail.com.