Is Lattice safe with your data?
Lattice
Degree, Inc. (Lattice)
Partial disclosure · high confidence
Lattice earns a C (49/100) because it discloses its data practices only in part.
#110
of 211 apps ranked
49
score · HR & recruiting avg 55
-6
vs category average
Lattice publishes a detailed controller-side privacy policy with strong rights, sharing and transfer disclosure, but says almost nothing about AI training, retention periods, breach notice or output ownership.
What Lattice's privacy policy and terms of service say about your data
Strongest area
Sharing and transfers: named recipient categories, an explicit "does not sell personal information to third parties" statement, EU Standard Contractual Clauses named as the transfer safeguard, and a commitment to notify users of compelled legal disclosure where permitted.
Weakest area
Training-data use is entirely absent from the captured text: no statement on whether inputs train models, no opt-out mechanism, no tier differences, and no output-ownership or content-licence clause, because the terms-of-service fetch returned only navigation chrome.
Retention gap
Retention is "as long as is necessary" with no number anywhere in the policy, no deletion timeline after account closure, and no shorter retention window for AI or service logs.
Security thin
Only SSL is named, and only for credit-card entry forms; everything else rests on "generally accepted industry standards," and there is no breach-notification commitment or timeframe at all.
What the policy is silent or vague on
- Not stated: keeping user inputs out of model training
- Not stated: a way to opt out of training
- Not stated: whether training use differs by plan
- Not stated: your ownership of generated outputs
Lattice privacy rating
Details
- Category
- HR & recruiting
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2026-05-05
- Region scored
- Global / US-default
- Last assessed
- 2026-08-13
Documents examined
Other hr & recruiting apps
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.