Know what TruRole uses before you share it.
This page explains the controls built into the product today. The formal Privacy Notice covers the legal controller, purposes, lawful bases, retention and data rights.
Your CV is private
Candidate CVs are stored as private files. Uploading a CV can populate editable profile fields, but the extracted information is not treated as unquestionable truth. Candidates can correct it before relying on it for matching.
Anonymous discovery is opt-in
A candidate can choose whether verified hiring teams may discover an anonymous evidence profile. Anonymous discovery does not expose the candidate's name, email, phone number, CV, previous employer names or education institutions.
Identity reveal needs specific permission
A hiring account must connect an identity request to a current verified vacancy. The candidate can approve or decline that request. Approved access is time-limited and the candidate can withdraw it before the consent window ends.
Career Passport and matching are evidence-led
The Career Passport and match tools use structured profile evidence such as skills, role-title history, location, working pattern, employment type, salary expectations and stated preferences. Missing evidence stays visible instead of being invented to improve a score.
No protected-characteristic ranking or automatic rejection
TruRole does not intentionally use race, ethnicity, religion, disability or health, sex, sexual orientation, gender reassignment, pregnancy or maternity, marriage or civil partnership, or age as candidate-ranking inputs. Match scores are decision-support information and do not automatically reject a candidate or make an employment decision.
CV optimisation cannot manufacture evidence
TruRole can reorder truthful skills and rewrite wording for a specific job, but unsupported requirements stay out of the generated CV. Experience bullets are accepted only when the optimiser can trace them back to evidence saved for that same role. Generated ATS-friendly DOCX/PDF files are created in the browser from the candidate-owned result.
External job checks stay separate from verification
When a candidate checks a job found elsewhere, TruRole can analyse the public URL or pasted advert for observable signals and compare it with the candidate profile. The pasted advert text is not stored verbatim in the saved check, and the result never becomes a TruRole Verified Vacancy.
Your external job tracker is private
Jobs you manually save from LinkedIn, Indeed, recruiters or company sites are candidate-owned tracker records. A status you set there is your own search note and does not create an employer response SLA or claim that the external employer confirmed that status.
Applications create an audit trail
Application submission, hiring-stage updates, candidate interest confirmations, withdrawals and final vacancy outcomes can be recorded as timeline events. This lets both sides see what happened rather than relying on an overwritten status alone.
Hiring trust evidence is separate
Company identity, corporate-domain association, recruiter authority, vacancy attestations, 7-day hiring-freshness signals and fraud reports are used to decide whether a vacancy can stay on the trusted public exchange.
Talent Pool Preview uses aggregate cohorts
Hiring teams can preview aggregate availability only from candidates who opted into anonymous discovery. TruRole suppresses detailed breakdowns when a filtered cohort has fewer than 10 profiles, and the preview never exposes names, emails or CVs.
Payment does not buy trust
Hiring payments purchase publication capacity only. New checkout is handled by Stripe. TruRole records provider references and entitlement state for the hiring account; payment cannot override a failed company, authority, salary or vacancy trust check.
Controls can change over time
Candidates can change recruiter-discovery settings, correct their profile, withdraw an active application, reconfirm interest and revoke an approved identity introduction. A hiring vacancy can also be paused when its evidence becomes stale or suspicious.
Legal notice and data-rights route
Production onboarding is gated by an active, versioned legal configuration. The Privacy Notice also gives signed-in users an in-app route for access, portability, erasure, correction, restriction and objection requests.