Candidate data, protected.
Candidate data stays inside the systems you already control, and every privacy request writes to its own append-only log. Amp records what was requested, by whom, and what happened, with retention you configure per organization.
The Privacy Console
A request arrives. Every state it passes through is on the record.
Deletion and access requests land in the Privacy Console with an SLA clock on each. Every action is logged for audit; a correction is a new row, nothing is edited out.
Data rights
Privacy Console
Manage data subject requests for your organization. All actions are logged for audit.
Total (90d)
12
Avg response
3.2d
Overdue
0
In exception
1
Resolved
9
Status · All statusesType · All typesSLA · AllSubmitted · Any time
StatusTypeCandidateSubmittedAgeSLA
In progressACCESS2026-09-063 days agoDue soon
VerifiedDELETION2026-09-054 days agoHealthy
FulfilledACCESS2026-09-027 days agoHealthy
1–3 of 12Page 1 of 4 · Previous · Next
Retention, yours to set
Kept exactly as long as you decide.
Activity and recording retention is configured per organization, 12 months by default. What deletion covers, and the intake path for candidate requests, ship with your deployment.
Activity log retention12 months
Session recording retention12 months
More of the system
See Amp running.
A 30-minute walkthrough, keyed to one of your roles and one of your geographies.
See Amp running