Purpose
This policy defines how integrations are developed, implemented, tested, monitored, and maintained to ensure data security, performance, privacy compliance, and a superior user experience across all connected systems.
Scope
This policy applies to all integration points between the Xipp.AI platform and external systems, including but not limited to:
- Applicant Tracking Systems (ATS)
- Human Resource Information Systems (HRIS)
- Job boards and sourcing platforms
- Scheduling and calendar tools
- Background check and assessment tools
- Any third-party service that exchanges candidate or employer data with Xipp.AI
Security and Compliance Standards
To ensure data integrity, confidentiality, and regulatory compliance:
Secure Communication & Authentication
- All integrations must use encrypted communications (HTTPS/TLS).
- Authentication should follow industry standards such as OAuth 2.0 or secure token-based systems to protect API access.
Data Protection & Privacy Compliance
- Data handling must comply with applicable privacy laws, including GDPR, CCPA, and other relevant regional data protection regulations.
- Personal data must be encrypted both in transit and at rest.
- Integrations must support processes for data subject rights, including access, correction, and deletion upon request.
Integration Development Requirements
All integrations must adhere to the following technical and operational best practices:
Clear API Documentation
- Partners must provide up-to-date API documentation that details endpoints, data models, authentication schemes, rate limits, and error handling.
Ethical Use and Transparency
Responsible AI Practices
- AI-driven decisions that affect candidate outcomes should be transparent and explainable.
- Xipp.AI encourages integrations that allow for human review and override of automated recommendations to promote fairness and accountability.
Termination and Suspension
Xipp.AI reserves the right to suspend or terminate any integration if it:
- Violates this policy or security standards
- Harms system performance or data integrity
- Fails to comply with regulatory or contractual obligations
Affected stakeholders will be given notice where feasible and opportunities to remediate issues before termination.
Free CV Analyzer and ATS Score Checker
When you use the free CV Analyzer or ATS Score Checker without an account:
- We store the CV you upload and the report we create from it.
- If your CV has an email address that isn't linked to a Xipp account, we add your CV to the candidates employers can search on Xipp. On our EU-language pages we only do this if you tick the box on the upload form. Employers see your contact details only after they unlock them.
- If you later create a Xipp account with that email address, the CV and report become part of your account.
- You can ask us to delete your CV and report at any time through our contact page.
- To limit free checks to one a day, we keep a one-way, salted fingerprint of your IP address - never the address itself.
Uploaded files are stored privately and are never published as a download link.
Support and Contact
For technical integration assistance, API access questions, or to report integration issues, contact the Xipp.AI Integration Support Team
info@xipp.ai