Is Lattice safe with your data?
Lattice
Degree, Inc. (Lattice)
Partial disclosure · high confidence
Lattice earns a C (61/100) because it discloses its data practices only in part.
#91
of 177 apps ranked
61
score · HR & recruiting avg 65
-4
vs category average
Lattice publishes a controller-side privacy policy with a data-subject rights menu, a named Data Protection Officer, an EU representative, Standard Contractual Clauses for international transfers, and a statement that it does not sell personal information. It loses the entire training-data domain because whether content entered into the Services feeds any AI model is covered in a separate AI Use Terms document that is outside this snapshot, and it gives only an as-long-as-necessary retention period with no day-count or deletion timeline. The rights and sharing disclosure together with the missing training answer and the open-ended retention put it in the C band.
What Lattice's privacy policy says about your data
No automated decisions
Section 12 states that Lattice does not engage in any automated decision making with User Personal Information, a limit that matters for an HR product.
Does not sell, with opt-out
Lattice declares under the CCPA that it does not sell personal information, and offers a CCPA opt-out portal at preferences.lattice.com/ccpa for the limited advertising sharing it does perform.
Full rights menu, DPO, and SCCs
Section 12 grants access, deletion, correction, portability, objection, and restriction. The policy names a Data Protection Officer at dpo@lattice.com, an EU representative, and Standard Contractual Clauses for transfers outside the EEA and UK.
Vague retention and silent on training
Retention is stated as as long as is necessary, with no day-count and no deletion timeline, and the policy never says whether content entered into the Lattice Services trains any AI models, because that is covered in a separate AI Use Terms document.
What the policy is silent or vague on
- Not stated: keeping user inputs out of model training
- Not stated: a way to opt out of training
- Not stated: whether training use differs by plan
- Not stated: your ownership of generated outputs
Lattice privacy rating
Details
- Category
- HR & recruiting
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2026-05-05
- Region scored
- Global / US-default
- Assessed
- 2026-06-20
Other hr & recruiting apps
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.