GDPR & data export

Export tenant candidate data, manage report API keys, and support data subject requests.

InsightHire provides tenant-wide data export for GDPR-style access/portability requests, offboarding backups, and BI integration — separate from EEOC demographic CSVs.

Data export UI

Path: /dashboard/settings/data-export

Org admins can:

• Export candidate profiles, assessment results, and analytics snapshots in CSV or JSON
• Configure export scope and filters via the Export Manager component
• Manage report API keys (when custom_reports is granted) for automated BI feeds

Non-admin users see access denied — mutations are enforced server-side.

Report API keys (custom_reports)

Feature flag: custom_reports

When granted, the same page renders Report API keys:

• Create read-only keys for external BI tools
• Rotate or revoke compromised keys
• Keys authenticate CSV endpoints documented in Custom reports

Candidate-level vs tenant-level

For single-candidate GDPR requests, run a filtered tenant export or work with InsightHire support for scoped extracts if your policy requires certification.

Retention and deletion

InsightHire supports org-initiated exports; deletion policies depend on your contract and subprocessors. Document retention in your privacy policy (/privacy on the marketing site) and coordinate with legal before purging production tenants.

Candidate portal users manage cookie/consent flows on public pages per your org configuration.

Security checklist

• Restrict /dashboard/settings/data-export to org admins
• Rotate report API keys after team changes
• Store exported CSVs encrypted at rest — exports contain PII
• Do not commit exports to shared drives without access controls

Related

• EEOC export — aggregate compliance CSV
• Roles & permissions — who can access settings