How ANDY handles data
What it reads, who decides, how candidates are ordered, and who else touches your data.
Where the data comes from
Your own records and files. Résumés you upload, CSV exports from the system you use today, and what candidates send you.
Pages you choose to save. The ANDY browser extension saves the page you are looking at when you click, one page per click, and only on sites your admin has allowed. It is switched off for LinkedIn.
No scraping. ANDY doesn't crawl LinkedIn or any site whose terms forbid it: no automated browsing, no shared logins, no getting around rate limits.
Licensed data providers will be added one at a time, each after its terms are reviewed. Every result will record its source, cost and date.
People approve
Agents draft and propose. In Co-Pilot, the default, every message waits for a person. These always need one, whatever the settings say:
- Answer candidates' questions (saved to the knowledge base)
- Submit candidate to client
- Merge records
- Update a sensitive field
- Send BD outreach
- Export a candidate's data (DSAR)
- Delete a candidate's data (DSAR)
Fair, explainable ranking
Candidates are ordered by the job's requirements, never by age, gender, race or other protected traits, and every place in the order shows its evidence.
ANDY supports hiring decisions. People make them.
Privacy
Each firm’s data is kept apart in the database itself, so one firm’s search can never return another firm’s records.
Every change is recorded: who changed a record or a setting, and when.
Clearance, pay and work authorization are stored encrypted, field by field.
Export and deletion requests for a candidate are approved by an admin and logged, and a deleted person isn’t brought back by a later import.
Mailbox connections store their sign-in tokens encrypted, and you can disconnect at any time. Messages to candidates go out from your own Gmail or Outlook account.
Security
Sign-in is by an emailed link, and owners and admins must also use an authenticator app.
Permissions are checked on the server for every action, by role: a sourcer can’t submit a candidate, and a viewer can’t change anything.
Agent runs stop at the cost, token and tool-call limits your admin sets, and text from résumés, emails and web pages is treated as data, never as instructions.
Sub-processors
The companies that process data on our behalf. This list is pending legal review.
| Company | What it does | Data it handles |
|---|---|---|
| Anthropic | AI models that draft blueprints, messages and explanations | The text of the requisitions, résumés and messages an agent is working on |
| Contabo | Hosts the servers and the database | Everything stored in ANDY |
| SendGrid (Twilio) | Delivers system email: sign-in links, invitations and notifications | Recipient email addresses and the message |
| Hostinger | DNS for our domains | None: it only answers DNS lookups |
| Cloudflare Turnstile | Checks that a person sent the demo request form | Technical signals from your browser while you use the form |
Gmail and Microsoft 365 are your own accounts, connected by you, not our sub-processors.
Questions buyers ask
Does ANDY scrape LinkedIn?
No. ANDY works from your own records and the files you upload. It doesn't crawl LinkedIn or any site whose terms forbid it. The browser extension saves only the page you are looking at, one click at a time, and it is switched off for LinkedIn. Licensed data providers will be added one at a time, each after its terms are reviewed.
Can it send email without my approval?
Not unless your admin allows it. In Co-Pilot, the default, every message waits in your approval queue. An admin can let some steps run on their own, such as the follow-ups of a sequence you already approved. Submitting a candidate to a client, merging records, changing sensitive fields and business development outreach always need a person, whatever the settings say.
Who can see my data?
Only the people in your workspace, according to their role. Each firm's records are kept apart in the database itself, so one firm's search can never return another firm's candidates.