AI Vendor Directory · HR & recruiting AI
Does Paradox train on your data?
Depends — varies by plan or setting. Vendor-stated default: unclear. No explicit public statement on whether candidate/client data trains Paradox's AI models. The vendor FAQ commits only to processor behavior: "Paradox may only process client data as required to provide the services in accordance with the client's instructions and the agreement," and marketing contrasts itself with "thin wrappers on OpenAI" by keeping data and models in its own infrastructure. Post-acquisition, expect Workday's contractual framework (opt-in ML data sharing) to govern; verify training language in your Paradox/Workday order form and DPA.
By the Shieldra Compliance Team · Last updated 2026-07-29
What is Paradox (Olivia)?
Conversational recruiting assistant (Olivia) for high-volume/frontline hiring: candidate chat, screening, interview scheduling, CRM. Acquired by Workday (completed Oct 1, 2025); its privacy policy now redirects to Workday's privacy statement.
Key facts
- Vendor: Paradox, Inc. (a Workday company since Oct 1, 2025) — https://www.paradox.ai
- Trains on customer data by default: unclear
- Source for the training answer: https://www.paradox.ai/faqs
- Last verified: 2026-07-29
What certifications does Paradox hold?
- SOC 2 Type II
- ISO 27001
- EU-US / Swiss-US Data Privacy Framework
Security, DPA, and subprocessor links
- Security / trust page: https://www.paradox.ai/security
What is your EU AI Act role when you build on Paradox?
Screening and filtering job applications is Annex III (employment) high-risk under the EU AI Act; the employer using Olivia is a deployer with Article 26 duties, plus Article 50 chatbot transparency — candidates must know they are talking to an AI.
Chat-based screening that ranks or filters candidates can qualify as an AEDT under NYC LL144 (employer must run annual bias audits and give notice); Illinois HB 3773 (eff. Jan 1, 2026) requires notice and non-discriminatory use of AI in employment decisions; Colorado's AI Act (eff. June 30, 2026) adds deployer impact-assessment duties.
What to record in your AI registry
- Provider: Paradox, Inc. (Workday)
- Model type: in house
- Data typically flowing to the vendor: candidate PII and chat transcripts, screening answers, interview scheduling data
Sources
- https://www.paradox.ai/security
- https://www.paradox.ai/faqs
- https://www.paradox.ai/privacy-policy
- https://newsroom.workday.com/2025-10-01-Workday-Completes-Acquisition-of-Paradox
Disclaimer
Curated from vendor-published pages on the date above. Vendor terms change - verify against the cited sources before relying on a profile for a procurement decision. Last verified 2026-07-29.
Frequently asked questions
Does Paradox train AI models on your data?
Depends — varies by plan or setting. Vendor-stated default: unclear. No explicit public statement on whether candidate/client data trains Paradox's AI models. The vendor FAQ commits only to processor behavior: "Paradox may only process client data as required to provide the services in accordance with the client's instructions and the agreement," and marketing contrasts itself with "thin wrappers on OpenAI" by keeping data and models in its own infrastructure. Post-acquisition, expect Workday's contractual framework (opt-in ML data sharing) to govern; verify training language in your Paradox/Workday order form and DPA.
What certifications does Paradox hold?
Per the vendor's published pages as of 2026-07-29: SOC 2 Type II; ISO 27001; EU-US / Swiss-US Data Privacy Framework.
What is your EU AI Act role when you build on Paradox?
Screening and filtering job applications is Annex III (employment) high-risk under the EU AI Act; the employer using Olivia is a deployer with Article 26 duties, plus Article 50 chatbot transparency — candidates must know they are talking to an AI.
