Tellent Recruitee and the GDPR: AI training, data location and DPA

Doesn't train on your data.

No. Tellent says it does not use customer data to train AI models or for other purposes beyond providing the Services, unless the Terms say otherwise. The DPA lets it use anonymised personal data to improve the Services.

Vendor's wording: “We do not use your data to train AI models or for any secondary purposes beyond providing the Services, unless explicitly stated in our Tellent Terms & Conditions.”

Source: recruitee.com5.1 Data ProtectionChecked on 19 October 2026

Germany. Main infrastructure is on Google Cloud in Frankfurt and Berlin; AWS (also Mailgun email) in Frankfurt. Customer support tool Intercom is hosted in the US (N. Virginia).

Vendor's wording: “Data processing location: Frankfurt and Berlin, Germany (google: europe-west3, europe-west10)”

Source: recruitee.comDPA Appendix 3, 1.1 Core Sub-processorsChecked on 19 October 2026

EU hosting available.

Yes, by default; no setting needed. Recruitee says all data stays within the EU, but the sub-processor list includes Intercom (support tool) in the USA.

Vendor's wording: “All of your data will stay within the European Union.”

Source: recruitee.comData export restrictionsChecked on 19 October 2026

DPA in the terms.

Yes. The DPA is an addendum to the Terms and applies automatically (no signature) unless a separate DPA was signed. Tellent is the processor.

Vendor's wording: “The Data Processing Addendum ('DPA') available on Tellent's website (https://tellent.com/terms) applies as an addendum to these Terms.”

Source: recruitee.com16.2 Data Processing AddendumChecked on 19 October 2026

Published.

Yes, public in the DPA Appendix 3 of the terms (also trust.tellent.com): 16 entries for Tellent Recruitee (6 core, 10 optional; the 'Tellent' entry is the group's affiliates). AI-related: Google Cloud, Microsoft Azure, Textkernel, Affinda. The trust centre counts 17 across products.

Vendor's wording: “Subscriber agrees that Tellent engages the following parties as Sub-processors as described below for the Tellent Recruitee SaaS”

Source: recruitee.comDPA Appendix 3: Sub-processors, 1. Tellent Recruitee SaaSChecked on 19 October 2026

EU or Swiss vendor.

Not applicable (EU-based vendor, Recruitee B.V., Amsterdam)

Vendor's wording: “The Tellent entity entering into this Agreement as contracting party is: Recruitee B.V., a private company with limited liability incorporated under the laws of the Netherlands”

Source: recruitee.com18.1 Tellent Contracting Party by LocationChecked on 19 October 2026

Customer sets a retention period to delete expired profiles automatically. After the contract ends, the customer can export content for 30 days and Tellent may delete it 30 days after termination; the DPA requires return or deletion at the customer's choice.

Vendor's wording: “Tellent may delete all Subscriber Content held by Tellent as part of terminated Services 30 (thirty) calendar days after termination.”

Source: recruitee.com12.2 Data Export and Deletion of DataChecked on 19 October 2026

2 named: ISO 27001:2022 and SOC 2 Type II (annual).

Vendor's wording: “The information security management system is certified to ISO 27001:2022”

Source: trust.tellent.comControls: Compliance and auditingChecked on 19 October 2026

Yes. Certain AI features are on by default; the customer can adjust or disable these settings at any time in the company account.

Vendor's wording: “Certain Tellent Intelligence features may be enabled by default; you may adjust or disable these settings at any time via your company account.”

Source: recruitee.comProduct-specific terms, 5.1 Tellent Intelligence GeneralChecked on 19 October 2026