Your recruitment agency uses Caio to collect and check the documents you provide during registration. Your agency controls your data. Caio processes it on the agency’s behalf. This page explains Caio’s part and sits alongside your agency’s own privacy notice, which remains the main one.
How your agency uses Caio
Your agency uses Caio, a compliance platform provided by Caio Technologies Ltd, to collect and check the documents you provide during registration.
Caio processes your information on your agency’s instructions. Your agency decides what is collected, why, and how long it is kept. Your agency’s privacy notice explains that.
What you upload
Depending on the role, this may include:
- your identity and right-to-work documents
- address history
- employment history and references
- qualifications
- DBS and other safeguarding information
- declarations you make.
What Caio does with it
Caio reads your documents, checks them against your agency’s compliance requirements, flags anything missing or unclear, and sends you reminders. It uses automated tools, including AI, to read documents.
A member of your agency’s staff reviews the results. Caio does not make the final decision on whether you are cleared to work; your agency does.
Who else sees it
Caio uses hosting, storage, workflow, login, monitoring and document-reading providers to run the service.
Candidate documents are processed using Amazon Textract and Amazon Bedrock in AWS’s London region. Documents and compliance evidence are stored in the UK. Clerk processes login information in the United States. New Relic processes operational monitoring data in the EU; document content is excluded from monitoring logs.
Where a provider is outside the UK, we transfer data under safeguards recognised by UK data protection law: the UK Extension to the EU–US Data Privacy Framework for providers certified under it, and otherwise the UK Addendum to the EU standard contractual clauses in the provider’s data processing agreement.
A list is available from your agency or Caio on request.
AI and your data
Caio does not use your documents to train AI models. We use Amazon Textract and Amazon Bedrock to process documents on your agency’s behalf.
How long
Your agency decides how long your information is kept and instructs Caio when it should be deleted. Caio handles deletion requests on the agency’s instructions. Some copies may remain in protected backups until their retention period expires.
Your rights
You can ask to see, correct or delete your information, or object to its use.
- Contact your agency, using the details in its privacy notice.
- If you contact Caio directly, Caio will pass your request to your agency.
- You can also complain to the Information Commissioner’s Office at ico.org.uk.
Contact Caio
Caio’s privacy notice covers the data Caio controls itself, such as website enquiries.
Contact Caio
Caio Technologies Ltd · Company number 16824324 · 71–75 Shelton Street, London, WC2H 9JQ