Security and compliance
Enterprise-grade.
Regulated-sector ready.
Australian by default.
Every candidate decision Zeli makes carries its reasoning, its evidence and its timestamp, and every byte stays where you expect it to. Full data sovereignty is not a roadmap item. It is achieved, and it is how we run today.
Data protection, controlled access and clear audit trails are central to Zeli’s approach. Talk to our team about your security requirements, data residency needs and procurement review before you get started.
Security and data sovereignty
Your data stays in Australia.
All of it.
The video interviews, the voice calls, the transcripts, the assessments and the storage all run in AWS Australia. Nothing is processed offshore. We don't know of another AI interview provider in Australia that can say that. Ask anyone else you evaluate. For US customers, the same platform runs in US regions.
- Hosted in AWS Australia (Sydney and Melbourne regions)
- Encrypted at rest and in transit
- Aligned to the Australian Privacy Principles
- Audit trail on every candidate decision
- Single sign-on and role-based access
- Candidates are always told an AI is involved
Zeli assesses what candidates say and what is on their resume against your scorecard, and reports fit, partial fit or weak fit with the reasoning attached. Nothing about faces, accents, tone of voice or background is analysed.
Review data residency, access controls and audit trails with our team as part of your procurement process. SOC 2 Type II is in progress.
Australian sovereign boundary · AWS Australia
- Video interviewsRecorded and stored here
- Voice callsAn Australian voice, processed here
- Transcripts and scoresGenerated here
- The AI itself50+ AI engines, switched inside the boundary
- Access controlSSO, roles, audit log
- Your ATS connectionEncrypted, both ways
Built for Australia.
Trusted by leading organisations.
Data sovereignty: achieved
All candidate data, recordings, transcripts and AI inference are processed and stored in AWS Australia (Sydney and Melbourne regions). Nothing is processed offshore. US regions are available for US customers on Enterprise.
Zero-trust architecture
Every request is authenticated and authorised. Services hold least privilege. Secrets never touch the browser.
Privacy by design
Zeli collects only what a role needs, tells candidates what and why, and deletes on request or on your retention schedule.
Full audit trail
Screens, interviews and rankings are logged with reasoning, evidence and timestamps. Exportable per role, per candidate, per decision.
Access and identity
Role-based access, single sign-on (Azure AD, Google, Okta) and per-tenant isolation. Sensitive fields such as salary can be restricted to named roles.
Encryption
TLS 1.2+ in transit. AES-256 at rest with managed keys. Customer-managed keys on Enterprise.
Compliance by jurisdiction
What we support, where.
Australia
- Privacy Act 1988 and the Australian Privacy Principles
- Notifiable Data Breaches scheme
- Anti-discrimination legislation: merit-based, evidence-quoted decisions
- Health-sector probity and credentialing (AHPRA, police checks, Blue Card, NDIS)
United States
- New York City Local Law 144: candidate notice, bias-audit posture, alternative process
- EEOC expectations: adverse-impact monitoring and human intervention
- State AI-in-hiring notice requirements (Illinois, Colorado) supported
European Union
- GDPR: lawful basis, data-subject rights, DPA on request
- Data residency in an EU region on Enterprise
Model-agnostic by design
Zeli uses the best available AI from OpenAI, Anthropic, Google and AWS through ZARE, served inside the sovereign boundary, and switches as the field advances. No candidate data is used to train third-party models.
Human-in-the-loop, always
Zeli recommends. A person on your team reviews every shortlist and makes every decision. Candidates can request human review at any point, and are always told an AI is involved.
Abuse and rate protection
Public demo endpoints are rate-limited and monitored. Telephony and avatar credentials live server-side only.
Bring your security questionnaire.
We answer them for a living. Send it over, or book a session with the team. CISOs, Procurement and People leaders all welcome in the same call.
- Full data sovereignty, achieved
- Full audit trail on every decision
- Backed by DNX Ventures