- Law
- EU
- In progress
GDPR: Ready
Self-assessed by IdeaScore. Not certified by an outside body.
The data protection laws of the European Union and the United Kingdom, for customers and people there.
In place
- A draft Data Processing Agreement that we offer to every customer.
- A public sub-processor list, with 30 days' notice of changes.
- The Privacy Policy sets out the rights of people in the European Union and the United Kingdom.
- IdeaScore AI never makes a decision about an applicant. A person always decides.
Work in progress
- Transfer clauses (EU Standard Contractual Clauses, and the UK Addendum), reviewed by a lawyer.
- Records of processing (Article 30).
- A data protection impact assessment for IdeaScore AI.
- A log of data subject requests.
- A reasoned answer on whether we need a representative in the EU and the UK (Article 27).
Evidence
- Data Processing AgreementPublished
- Privacy Policy, your rightsPublished
- Impact assessment for IdeaScore AIBeing prepared
Limits
- IdeaScore has no company in the European Union or the United Kingdom.
- The transfer clauses have not been reviewed by a lawyer yet. Until they are, this entry stays in progress.
Bring Your Questions to a Product Specialist
A 30-minute walkthrough of the Trust Centre, the Data and Privacy card and the Decision Trail, with your committee's questions.