Effective date: 16 September 2026
Verificient Technologies Inc.
300 Witherspoon Street, Suite 201, Princeton, New Jersey 08542
Contact: privacy@verificient.com
This Policy explains how Verificient Technologies Inc. ("Verificient", "we", "us") collects, uses, discloses, and protects Personal Information in connection with Meritclaw and its related services.
Meritclaw is an AI-assisted hiring integrity platform. Organizations use it to verify candidate identity, deliver and monitor skills assessments and interviews, screen resumes, and verify completion of internal training. Meritclaw produces decision-support signals and scores for human reviewers.
Meritclaw does not make automated hiring decisions and produces no hire/no-hire output. It does not perform emotion or affect recognition, and it does not analyse keystroke dynamics.
How long we keep your information, and how we destroy it, is set out in a separate document: the Meritclaw Data Retention and Destruction Policy. That document contains our published written retention schedule for biometric information. This Policy and the Retention Policy are written to be read together, and this Policy does not repeat the schedule. In summary: face captures and session recordings are kept 30 days by default; records that identify you are kept 30 days; a pseudonymous log of integrity events is kept 12 months. A Client Organization may extend some of these; the limits are in the Retention Policy.
Candidates — individuals using Meritclaw as part of an application for employment or engagement.
Employees — individuals using Meritclaw as part of a training or upskilling programme run by their existing employer.
Client Organization personnel — recruiters, hiring managers, and administrators who use the Meritclaw dashboard.
Website visitors — people who visit our public web pages.
The Client Organization is the employer, staffing agency, recruiter, or training provider that engaged Verificient and invited you.
The Client Organization is the data controller. It decides what is collected, how long it is kept within the limits we permit, and how results are used in its hiring or training process.
Verificient is the data processor. We process your Personal Information on the Client Organization's documented instructions and for no purpose of our own.
This matters for your rights: requests to access, correct, or delete your information are handled by the Client Organization, which can act on them in Meritclaw immediately and without our involvement. See Section 8.
Legal basis. Where the law requires a legal basis for processing, the Client Organization determines it as controller. For biometric information we rely on your consent, obtained before any capture (Section 6). For everything else, the Client Organization typically relies on its legitimate interest in verifying the integrity of its hiring or training process, or on steps taken at your request before entering an employment relationship. The Client Organization can tell you which basis it relies on.
From you, during use of Meritclaw
Face captures. A live image of your face, taken at each verification checkpoint — enrollment, and the start of each assessment, interview, or training session. Our Retention Policy calls this a Baseline Reference. During a session, frames from your camera are sampled at intervals and compared against your most recent face capture to confirm you are the same person. That comparison happens in memory. The sampled frames are not stored anywhere — not in files, logs, or backups. What is recorded is the result: a similarity score, a match verdict, and a timestamp.
Meritclaw does not collect government-issued identity documents.
Session recordings (called Session Media in our Retention Policy). Depending on how the Client Organization has configured Meritclaw: webcam video and audio, screen recording or screen sharing, a secondary or phone camera stream, and an initial room scan.
Assessment and interview content. Your answers, code submissions, written responses, and transcripts of spoken responses.
Integrity signals. Events detected during a session — for example a second face appearing, you leaving the camera frame, a prohibited application running, or an unexpected device connected — each with a supporting image. The supporting images are session recordings and follow the same short retention. The record of the event itself, held against a session identifier rather than your name or image, is what our Retention Policy calls the Integrity Event Log and is kept longer for audit purposes.
Device and technical information. Operating system, browser, device identifiers, IP address, running processes and applications, network characteristics, and diagnostic logs. Meritclaw performs operating-system-level monitoring during a session to detect virtual machines, remote-access tools, and screen-sharing software.
Communications. Support requests and messages you send us.
From the Client Organization
Your name, email address, and the role you applied for; resume and application data; job description and assessment configuration; training module and programme information; and identifiers it uses to match you in its own systems.
From Client Organization personnel
For recruiters, hiring managers, and administrators: name, work email, role and permissions, and records of actions taken in the dashboard, including who viewed a candidate record, who changed a retention setting, and who deleted data.
Automatically, from our website
Cookies and similar technologies on our public web pages, for site function, preferences, and analytics. You can control cookies through your browser settings and through the cookie banner on our site. We honour Global Privacy Control signals where they are transmitted. Cookies are separate from the session monitoring described above, which is not cookie-based.
We do not use your information to train, fine-tune, or evaluate AI or machine learning models. Model development at Verificient uses open-source, synthetic, licensed, and employee-generated data. We may use de-identified technical signatures of tools and techniques detected during sessions, and anonymized session statistics, to maintain our detection capability; neither identifies any individual.
We do not use your information for marketing, for profiling outside the hiring or training workflow you are part of, or for any purpose the Client Organization has not authorized.
Sensitive personal information. Biometric information is treated as sensitive personal information under California and other state laws. We use it only to verify your identity and detect impersonation — purposes for which state law does not provide a right to limit use — and for no other purpose.
Meritclaw uses computer vision for face detection and matching, motion and blur tracking, spoofing detection, and detection of mobile phones and other devices. It uses conversational AI in skills discussions and in support interactions.
AI identifies potential integrity issues. It does not determine that anyone cheated. Alerts that require review are assessed by people, who may be representatives of the Client Organization.
Meritclaw does not perform emotion recognition, affect recognition, or personality inference. It does not make automated hiring decisions and produces no hire/no-hire output.
You have the right to understand how AI is used in your assessment, to ask for clarification of an AI-generated alert, and to ask the Client Organization how any score was used in its decision. Where the law requires an employer to notify you that artificial intelligence is being used in its hiring process, that obligation belongs to the Client Organization; Meritclaw presents a statement to that effect during enrollment on its behalf.
The face capture described in Section 3 is a biometric identifier under laws including the Illinois Biometric Information Privacy Act, the Texas Capture or Use of Biometric Identifier Act, and the Colorado Privacy Act.
We obtain your consent before any face capture. Before enrollment proceeds you are shown a notice stating what is collected, the purpose, how long each category is kept, that Verificient holds the data as processor and the named Client Organization holds it as controller, that the Client Organization may retrieve an export containing your session face capture and integrity events before the recording expires, and how to withdraw consent. You must accept before capture begins. Your consent, and any withdrawal, is logged and retained for three years as the record of your authorization.
You may withdraw consent at any time, using the link provided at enrollment and in our emails to you. Withdrawal takes effect going forward: no new face capture will be taken without asking you again, and the Client Organization is notified. Withdrawal is not retroactive — captures already taken are destroyed on their normal schedule rather than immediately, and verification results already recorded stand.
Face matching runs entirely on infrastructure we control. No third-party face-matching service or API receives your image, the sampled frames, or any representation derived from them.
We do not sell, lease, trade, or otherwise profit from biometric information, and we do not use it to train machine learning models.
Training programmes. Where Meritclaw is used for internal training verification, biometric verification is switched off by default. It is enabled only for a specific programme, and only after the organization issuing that programme confirms the programme produces a credential, attestation, or certification for which identity verification is required.
Retention and destruction of biometric information is governed by Section 5 of the Meritclaw Data Retention and Destruction Policy, which is our published written retention schedule for that purpose.
With the Client Organization that invited you. Verification results, session recordings, integrity signals, scores, and assessment content, through its dashboard and, where configured, through an Integrity Export — a package containing the face captured during the session, the list of integrity events, and one supporting image per event, which the Client Organization may retrieve before the recording expires. It does not contain the full session recording. Results may also flow into the Client Organization's applicant tracking system where it has configured an integration.
With service providers. Cloud hosting and infrastructure providers that support Meritclaw, under contracts limiting them to processing on our instructions. No service provider performs face matching or receives sampled frames or derived representations of face geometry.
Where the law requires. In response to a valid subpoena, warrant, court order, or regulatory demand, and to establish or defend legal claims.
In a corporate transaction. If Verificient is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction, subject to this Policy and to our obligations to the Client Organization as its processor.
We do not sell your Personal Information, and we do not share it for cross-context behavioural advertising, as those terms are used in US state privacy laws.
Where results flow into a Client Organization's applicant tracking system, or Meritclaw operates alongside a video conferencing platform, information in those systems is governed by that organization's own policies. Deleting information from Meritclaw does not delete copies held elsewhere.
Because the Client Organization is the data controller, send requests to access, correct, delete, or obtain a copy of your information to the Client Organization that invited you. It can act on them in Meritclaw directly. If you contact us instead, we will tell you which organization to approach and will assist it in responding.
Depending on where you live, you may have the right to know what categories of Personal Information are collected and why; to access a copy; to correct inaccurate information; to have your information deleted; to opt out of sale or targeted advertising, neither of which we do; to appeal a refused request; and not to be treated differently for exercising a right.
Appeals. Where state law gives you the right to appeal a refused request, the appeal is made to the Client Organization that refused it. If it does not respond, you may contact your state Attorney General.
Some rights are specific:
We protect your information with encryption in transit and at rest, access controls and authentication, activity logging, and restriction of access within Verificient to personnel who need it to operate or support the service.
If a security incident may have compromised biometric information, our response — including invalidating affected face captures so they cannot be used for any further identity match — is set out in the Meritclaw Data Retention and Destruction Policy. As controller, the Client Organization is responsible for notifying you and any regulator where the law requires.
No system is perfectly secure, and we cannot guarantee absolute security.
Meritclaw is operated from the United States, and information is stored in United States cloud regions.
If you are located outside the United States, your information will be transferred to and processed in the United States. Where that transfer requires a legal mechanism, the Client Organization as controller is responsible for putting it in place, and we support it in doing so. Our default retention periods are set to remain defensible under the strictest data protection laws that may apply to you.
Meritclaw is intended for individuals of legal working age in their jurisdiction, and is not directed to anyone under 16. We do not knowingly collect Personal Information from anyone under 16. If we learn that we have, we will delete it and notify the Client Organization.
We review this Policy at least annually and whenever there is a material change to Meritclaw or to applicable law. Changes are published here with an updated effective date. Where a change materially affects how we handle information already collected, we will give notice through Meritclaw or through the Client Organization.
privacy@verificient.com
Verificient Technologies Inc., 300 Witherspoon Street, Suite 201, Princeton, New Jersey 08542
For requests about information held about you, contact the Client Organization that invited you — it is the data controller and can act directly.