Is Darktrace safe with your data?

Training data is irreversible

Personal data processed through the Paradox recruitment platform trains its LLMs, and the notice states that because model training is not reversible, data already used cannot be withdrawn or removed from trained models. Candidates who decline can request an alternative non-AI method, but anyone who uses the Olivia chat tool cannot opt out of the AI processing.

No retention period is named

Data is kept for as long as reasonably necessary, with longer retention where litigation is anticipated. Actual retention schedules are not published and must be requested from the Data Protection Officer.

Rights are strong, security detail is thin

Access, correction, erasure, restriction, objection and opt-out are all offered through a named privacy address, and an internal Data Protection Officer is named with full contact details. Erasure is available only where no remaining justification for the data exists. Security is described only as appropriate administrative, physical, technical and organizational measures, with no encryption standard, certification or breach-notification timeframe.

Website analytics sit outside the no-sale claim

Darktrace does not sell data captured through its products or services, yet concedes that Google Analytics on its public website may count as exchanging data for valuable consideration under CCPA, leaving a browser add-on as the opt-out.