Compliance Overview

Last updated: October 20, 2026

Draft notice. This page summarizes Prelim's approach to compliance and the resources we provide to customers. It is not legal advice. Customers should consult their own counsel for their specific obligations.

How the system works

Prelim is a text-only AI screening tool for hiring. The product does not record video, voice, or biometric data.

  • A candidate receives a link from an employer and answers interview questions in a chat interface.
  • A first-stage model (currently OpenAI gpt-4o-mini) evaluates whether each configured question has been answered and generates clarifying follow-ups when needed.
  • A second-stage model scores the candidate's responses on a 0 to 100 scale with written reasoning, and produces a five-tier recommendation (strong_yes / yes / maybe / no / strong_no). New jobs use OpenAI gpt-6-sol, and the overall score and recommendation are worked out from its score for each question. Jobs created before that change stay on OpenAI gpt-4o, so every applicant to the same job is scored the same way.
  • The employer reviews the scores, reasoning, and recommendation and makes the final hiring decision. AI output is decision-support; it is not the decision.

Prelim for job seekers

Prelim also offers free tools for job seekers: a resume builder that works by chat, job matches, and a public job board. For these tools, Prelim is the controller, and the Privacy Policy explains how the data is handled.

  • Fit ratings (Strong fit, Good fit, Stretch) rank jobs for the job seeker only. Employers never see them, and they play no part in how an employer's interview is scored.
  • Employers can choose to list a job on the Prelim job board. Job seekers who apply with Prelim take that employer's own interview and are scored the same way as every other applicant. The employer also receives the resume the job seeker chose to send.
  • The job seeker chat never asks for age, birth date, race, religion, disability, pregnancy, marital status, citizenship beyond work authorization, criminal records, or pay history. Graduation years stay off resumes unless the job seeker chooses to show them.
  • Unclaimed drafts are deleted 30 days after last activity, and job seekers can delete their data at any time from their account page.

What data is processed

  • From the candidate: name, email, and the text responses they provide during the interview.
  • From job board applicants: the same, plus the resume a job seeker chose to send with Apply with Prelim.
  • From the employer: the job description, interview questions, and scoring rubric.
  • Generated by Prelim: AI scores, written reasoning, and the recommendation tier.

Interview transcripts and scores are retained for 18 months from interview completion and then deleted automatically. Account data is retained while the account is active. See the Privacy Policy for full details.

Sub-processors

All sub-processors are US-based.

  • OpenAI, L.L.C.: AI scoring and conversation, the job seeker chat and resume writing, and help chat answers. API-submitted data is retained up to 30 days for abuse monitoring and is not used to train OpenAI models.
  • Neon: managed Postgres database (US).
  • Google Cloud Run: API hosting (US).
  • Vercel: frontend hosting (US).
  • Resend: email delivery for sign-in links and codes, interview notifications, and other product emails (US).
  • Postmark: email delivery for some product emails, like digests (US).

Each provider's data-processing terms govern their handling of personal data. OpenAI and Google Cloud auto-incorporate a Data Processing Addendum into their terms of service; Vercel hosts our frontend, and Resend and Postmark deliver our email, under their standard terms of service; we maintain a direct Data Processing Addendum with Neon on request. The authoritative sub-processor list is in the Privacy Policy.

UK and EU candidates

Prelim supports employers and candidates in the United Kingdom. Transfers of UK personal data to Prelim in the United States are covered by the UK International Data Transfer Addendum in our Data Processing Addendum, and each of our sub-processors provides UK GDPR transfer safeguards.

Prelim does not currently market to the European Economic Area and geo-fences candidates located in the EU and EEA. Customers who need EU coverage should contact us before issuing interviews to EU candidates.

Candidate rights

Regardless of jurisdiction, candidates may:

  • Request a copy of the AI score, reasoning, and recommendation generated about their interview.
  • Request deletion of their data.
  • Ask what data was shared with the employer that issued their interview.
  • Request a reasonable accommodation or alternative screening process under the ADA. The accommodation link shown in-interview routes to the employer's designated contact.

Candidates can exercise these rights by emailing marcus@prelim.chat with the subject "Privacy Request," or by contacting the employer directly.

Job seekers using Prelim's free tools have the rights in the Privacy Policy, and can delete their data at any time from their account page.

ADA accommodations

Prelim's interview is a written chat. Some candidates may need an alternative format, additional time, or other reasonable accommodation under the Americans with Disabilities Act and analogous state laws. The Prelim interview displays an accommodation-request link that routes to the employer's designated contact email. Employers are responsible for receiving, evaluating, and granting accommodation requests, and for offering an alternative screening process to candidates who cannot effectively use the chat-based interview. See the Terms of Service.

Employer compliance resources

  • Data Processing Addendum (DPA) template: covers Prelim's role as processor, sub-processors, security measures, breach notification, audit rights, and deletion on termination.
  • Jurisdiction notice templates: copy-and-fill templates for NYC Local Law 144, Illinois HB 3773 (Public Act 103-0804), and California FEHA Automated Decision System notices.
  • Privacy Policy: what data Prelim collects, how it is processed, and candidate rights.
  • Terms of Service: customer obligations regarding human review, jurisdiction-specific notices, and accommodations.

Bias audits and testing

Customers using Prelim for NYC-based roles or NYC-resident candidates are responsible for arranging an independent bias audit of the AEDT under NYC Local Law 144 and for publishing the summary results. Prelim will, on customer request, provide reasonable information to support a customer-commissioned audit.

Contact

Compliance, security, or DPA questions: marcus@prelim.chat.